CVE-2021-47060

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47060
In the Linux kernel, the following vulnerability has been resolved: KVM: Stop looking for coalesced MMIO zones if the bus is destroyed Abort the walk of coalesced MMIO zones if kvm_io_bus_unregister_dev() fails to allocate memory for the new instance of the bus. If it can't instantiate a new bus, unregister_dev() destroys all devices _except_ the target device. But, it doesn't tell the caller that it obliterated the bus and invoked the destructor for all devices that were on the bus. In the coalesced MMIO case, this can result in a deleted list entry dereference due to attempting to continue iterating on coalesced_zones after future entries (in the walk) have been deleted. Opportunistically add curly braces to the for-loop, which encompasses many lines but sneaks by without braces due to the guts being a single if statement.

6.0 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/168e82f640ed1891a700bdb43e37da354b2ab63c Patch
https://git.kernel.org/stable/c/2a20592baff59c5351c5200ec667e1a2aa22af85 Patch
https://git.kernel.org/stable/c/50cbad42bfea8c052b7ca590bd4126cdc898713c Patch
https://git.kernel.org/stable/c/5d3c4c79384af06e3c8e25b7770b6247496b4417 Patch
https://git.kernel.org/stable/c/7d1bc32d6477ff96a32695ea4be8144e4513ab2d Patch
https://git.kernel.org/stable/c/168e82f640ed1891a700bdb43e37da354b2ab63c Patch
https://git.kernel.org/stable/c/2a20592baff59c5351c5200ec667e1a2aa22af85 Patch
https://git.kernel.org/stable/c/50cbad42bfea8c052b7ca590bd4126cdc898713c Patch
https://git.kernel.org/stable/c/5d3c4c79384af06e3c8e25b7770b6247496b4417 Patch
https://git.kernel.org/stable/c/7d1bc32d6477ff96a32695ea4be8144e4513ab2d Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

08 Apr 2025, 15:01

Type Values Removed Values Added
CWE NVD-CWE-noinfo
References () https://git.kernel.org/stable/c/168e82f640ed1891a700bdb43e37da354b2ab63c - () https://git.kernel.org/stable/c/168e82f640ed1891a700bdb43e37da354b2ab63c - Patch
References () https://git.kernel.org/stable/c/2a20592baff59c5351c5200ec667e1a2aa22af85 - () https://git.kernel.org/stable/c/2a20592baff59c5351c5200ec667e1a2aa22af85 - Patch
References () https://git.kernel.org/stable/c/50cbad42bfea8c052b7ca590bd4126cdc898713c - () https://git.kernel.org/stable/c/50cbad42bfea8c052b7ca590bd4126cdc898713c - Patch
References () https://git.kernel.org/stable/c/5d3c4c79384af06e3c8e25b7770b6247496b4417 - () https://git.kernel.org/stable/c/5d3c4c79384af06e3c8e25b7770b6247496b4417 - Patch
References () https://git.kernel.org/stable/c/7d1bc32d6477ff96a32695ea4be8144e4513ab2d - () https://git.kernel.org/stable/c/7d1bc32d6477ff96a32695ea4be8144e4513ab2d - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/168e82f640ed1891a700bdb43e37da354b2ab63c - () https://git.kernel.org/stable/c/168e82f640ed1891a700bdb43e37da354b2ab63c -
References () https://git.kernel.org/stable/c/2a20592baff59c5351c5200ec667e1a2aa22af85 - () https://git.kernel.org/stable/c/2a20592baff59c5351c5200ec667e1a2aa22af85 -
References () https://git.kernel.org/stable/c/50cbad42bfea8c052b7ca590bd4126cdc898713c - () https://git.kernel.org/stable/c/50cbad42bfea8c052b7ca590bd4126cdc898713c -
References () https://git.kernel.org/stable/c/5d3c4c79384af06e3c8e25b7770b6247496b4417 - () https://git.kernel.org/stable/c/5d3c4c79384af06e3c8e25b7770b6247496b4417 -
References () https://git.kernel.org/stable/c/7d1bc32d6477ff96a32695ea4be8144e4513ab2d - () https://git.kernel.org/stable/c/7d1bc32d6477ff96a32695ea4be8144e4513ab2d -

07 Nov 2024, 17:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.0

01 Mar 2024, 14:04

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: KVM: deja de buscar zonas MMIO fusionadas si el bus se destruye. Cancela el recorrido de las zonas MMIO fusionadas si kvm_io_bus_unregister_dev() no puede asignar memoria para la nueva instancia del bus. Si no puede crear una instancia de un nuevo bus, unregister_dev() destruye todos los dispositivos _excepto_ el dispositivo de destino. Pero no le dice a la persona que llama que destruyó el bus e invocó el destructor para todos los dispositivos que estaban en el bus. En el caso de MMIO fusionado, esto puede resultar en una desreferencia de entrada de lista eliminada debido al intento de continuar iterando en coalesced_zones después de que se hayan eliminado entradas futuras (en el recorrido). De manera oportunista, agregue llaves al bucle for, que abarca muchas líneas pero se escapa sin llaves debido a que el valor es una sola declaración if.

29 Feb 2024, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-29 23:15

Updated : 2025-04-08 15:01

NVD link : CVE-2021-47060

Mitre link : CVE-2021-47060

CVE.ORG link : CVE-2021-47060

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo