CVE-2021-46967

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-46967
In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping The virtqueue doorbell is usually implemented via registeres but we don't provide the necessary vma->flags like VM_PFNMAP. This may cause several issues e.g when userspace tries to map the doorbell via vhost IOTLB, kernel may panic due to the page is not backed by page structure. This patch fixes this by setting the necessary vm_flags. With this patch, try to map doorbell via IOTLB will fail with bad address.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3a3e0fad16d40a2aa68ddf7eea4acdf48b22dd44 Patch
https://git.kernel.org/stable/c/3b8b6399666a29daa30b0bb3f5c9e3fc81c5a6a6 Patch
https://git.kernel.org/stable/c/93dbbf20e3ffad14f04227a0b7105f6e6f0387ce Patch
https://git.kernel.org/stable/c/940230a5c31e2714722aee04c521a21f484b4df7 Patch
https://git.kernel.org/stable/c/3a3e0fad16d40a2aa68ddf7eea4acdf48b22dd44 Patch
https://git.kernel.org/stable/c/3b8b6399666a29daa30b0bb3f5c9e3fc81c5a6a6 Patch
https://git.kernel.org/stable/c/93dbbf20e3ffad14f04227a0b7105f6e6f0387ce Patch
https://git.kernel.org/stable/c/940230a5c31e2714722aee04c521a21f484b4df7 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

06 Dec 2024, 17:55

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/3a3e0fad16d40a2aa68ddf7eea4acdf48b22dd44 - () https://git.kernel.org/stable/c/3a3e0fad16d40a2aa68ddf7eea4acdf48b22dd44 - Patch
References () https://git.kernel.org/stable/c/3b8b6399666a29daa30b0bb3f5c9e3fc81c5a6a6 - () https://git.kernel.org/stable/c/3b8b6399666a29daa30b0bb3f5c9e3fc81c5a6a6 - Patch
References () https://git.kernel.org/stable/c/93dbbf20e3ffad14f04227a0b7105f6e6f0387ce - () https://git.kernel.org/stable/c/93dbbf20e3ffad14f04227a0b7105f6e6f0387ce - Patch
References () https://git.kernel.org/stable/c/940230a5c31e2714722aee04c521a21f484b4df7 - () https://git.kernel.org/stable/c/940230a5c31e2714722aee04c521a21f484b4df7 - Patch

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/3a3e0fad16d40a2aa68ddf7eea4acdf48b22dd44 - () https://git.kernel.org/stable/c/3a3e0fad16d40a2aa68ddf7eea4acdf48b22dd44 -
References () https://git.kernel.org/stable/c/3b8b6399666a29daa30b0bb3f5c9e3fc81c5a6a6 - () https://git.kernel.org/stable/c/3b8b6399666a29daa30b0bb3f5c9e3fc81c5a6a6 -
References () https://git.kernel.org/stable/c/93dbbf20e3ffad14f04227a0b7105f6e6f0387ce - () https://git.kernel.org/stable/c/93dbbf20e3ffad14f04227a0b7105f6e6f0387ce -
References () https://git.kernel.org/stable/c/940230a5c31e2714722aee04c521a21f484b4df7 - () https://git.kernel.org/stable/c/940230a5c31e2714722aee04c521a21f484b4df7 -

28 Feb 2024, 14:06

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: vhost-vdpa: corrige vm_flags para el mapeo del timbre virtqueue El timbre virtqueue generalmente se implementa a través de registros, pero no proporcionamos los vma->flags necesarios como VM_PFNMAP. Esto puede causar varios problemas, por ejemplo, cuando el espacio de usuario intenta asignar el timbre a través de vhost IOTLB, el kernel puede entrar en pánico debido a que la página no está respaldada por la estructura de la página. Este parche soluciona este problema configurando los vm_flags necesarios. Con este parche, intentar asignar el timbre a través de IOTLB fallará con una dirección incorrecta.

27 Feb 2024, 19:04

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-27 19:04

Updated : 2024-12-06 17:55

NVD link : CVE-2021-46967

Mitre link : CVE-2021-46967

CVE.ORG link : CVE-2021-46967

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo