5.5

CVE-2021-47296

KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak

In the Linux kernel, the following vulnerability has been resolved:

KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak

vcpu_put is not called if the user copy fails. This can result in preempt
notifier corruption and crashes, among other issues.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.18 < 4.19.199
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.136
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.54
Linux ≫ Linux Kernel Version >= 5.11 < 5.13.6
Linux ≫ Linux Kernel Version5.14 Updaterc1
Linux ≫ Linux Kernel Version5.14 Updaterc2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.129
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/9bafc34dc4ad0cef18727c557f21ed3c3304df50
Patch
https://git.kernel.org/stable/c/a4a488915feaad38345cc01b80d52e8200ff5209
Patch
https://git.kernel.org/stable/c/bc4188a2f56e821ea057aca6bf444e138d06c252
Patch
https://git.kernel.org/stable/c/e14ef1095387f764d95614d3ec9e4d07c82a3533
Patch
https://git.kernel.org/stable/c/f38527f1890543cdfca8dfd06f75f9887cce6151
Patch