Skip to content
Not rated

CVE-2021-3501 A flaw was found in the Linux kernel in versions before 5.12

Description

A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.

Affected products and versions

Product Affected versions Fixed in
kernel Versions not published
kernel 5.11 5.11 → < 5.11.16 5.11.16
kernel 5.9 5.9 → < 5.10.32 5.10.32
The 279 CVEs of kernel →
Track this CVE