CVE-2021-22543

Katalog CVE

CVSS 7.8 · High EPSS 0,66%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada linux kernel, fedoraproject fedora +11 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation.

Rincian

Terbit di NVD

26 Mei 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

EPSS (30 hari)

0,66% peluang dieksploitasi; lebih tinggi dari 50,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/google/security-research/security/advisories/GHSA-7wq5-phmq-m584 exploit · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210708-0002/ advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/06/26/1 mailing list
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4G5YBUVEPHZYX...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ROQIXQB7ZAWI3...