8.7
Élevée
CVE-2021-22543 An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks…
Description
An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux Kernel | Versions non publiées |
Références
- github.com github.com
- [oss-security] 20210626 Re: CVE-2021-22543 - /dev/kvm LPE www.openwall.com
- FEDORA-2021-fe826f202e lists.fedoraproject.org
- FEDORA-2021-95f2f1cfc7 lists.fedoraproject.org
- security.netapp.com security.netapp.com
- [debian-lts-announce] 20211015 [SECURITY] [DLA 2785-1] linux-4.19 security update lists.debian.org
- [debian-lts-announce] 20211216 [SECURITY] [DLA 2843-1] linux security update lists.debian.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Linux Kernel
Les 11 CVE de Linux Kernel →
CVE-2022-2503
Dm-verity is used for extending root-of-trust to root filesystems
6.9
Moyenne
CVE-2022-2327
io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is…
7.5
Élevée
CVE-2021-23134
Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their…
7.8
Élevée
CVE-2021-23133
A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege…
6.7
Moyenne