CVE-2021-47296 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak vcpu_put is not called if the user copy fails. This can result in preempt notifier corruption and crashes, among other issues.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/9bafc34dc4ad0cef18727c557f21ed3c3304df50
https://git.kernel.org/stable/c/a4a488915feaad38345cc01b80d52e8200ff5209
https://git.kernel.org/stable/c/bc4188a2f56e821ea057aca6bf444e138d06c252
https://git.kernel.org/stable/c/e14ef1095387f764d95614d3ec9e4d07c82a3533
https://git.kernel.org/stable/c/f38527f1890543cdfca8dfd06f75f9887cce6151
https://lore.kernel.org/linux-cve-announce/2024052124-CVE-2021-47296-a208@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2021-47296
https://www.cve.org/CVERecord?id=CVE-2021-47296

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T14:35:19.341Z

Updated: 2024-11-04T12:03:11.334Z

Reserved: 2024-05-21T13:27:52.130Z

Link: CVE-2021-47296

Vulnrichment

Updated: 2024-08-04T05:32:08.371Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T15:15:17.477

Modified: 2024-05-21T16:54:26.047

Link: CVE-2021-47296

Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2021-47296 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47296", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T13:27:52.130Z", "datePublished": "2024-05-21T14:35:19.341Z", "dateUpdated": "2024-11-04T12:03:11.334Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T12:03:11.334Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak\n\nvcpu_put is not called if the user copy fails. This can result in preempt\nnotifier corruption and crashes, among other issues."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/powerpc/kvm/powerpc.c"], "versions": [{"version": "b3cebfe8c1ca", "lessThan": "9bafc34dc4ad", "status": "affected", "versionType": "git"}, {"version": "b3cebfe8c1ca", "lessThan": "f38527f18905", "status": "affected", "versionType": "git"}, {"version": "b3cebfe8c1ca", "lessThan": "e14ef1095387", "status": "affected", "versionType": "git"}, {"version": "b3cebfe8c1ca", "lessThan": "a4a488915fea", "status": "affected", "versionType": "git"}, {"version": "b3cebfe8c1ca", "lessThan": "bc4188a2f56e", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/powerpc/kvm/powerpc.c"], "versions": [{"version": "4.18", "status": "affected"}, {"version": "0", "lessThan": "4.18", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.199", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.136", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.54", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.13.6", "lessThanOrEqual": "5.13.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.14", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/9bafc34dc4ad0cef18727c557f21ed3c3304df50"}, {"url": "https://git.kernel.org/stable/c/f38527f1890543cdfca8dfd06f75f9887cce6151"}, {"url": "https://git.kernel.org/stable/c/e14ef1095387f764d95614d3ec9e4d07c82a3533"}, {"url": "https://git.kernel.org/stable/c/a4a488915feaad38345cc01b80d52e8200ff5209"}, {"url": "https://git.kernel.org/stable/c/bc4188a2f56e821ea057aca6bf444e138d06c252"}], "title": "KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47296", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-28T19:22:38.048038Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:14:24.621Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:32:08.371Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/9bafc34dc4ad0cef18727c557f21ed3c3304df50", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f38527f1890543cdfca8dfd06f75f9887cce6151", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e14ef1095387f764d95614d3ec9e4d07c82a3533", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/a4a488915feaad38345cc01b80d52e8200ff5209", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/bc4188a2f56e821ea057aca6bf444e138d06c252", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/9bafc34dc4ad0cef18727c557f21ed3c3304df50", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f38527f1890543cdfca8dfd06f75f9887cce6151", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e14ef1095387f764d95614d3ec9e4d07c82a3533", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/a4a488915feaad38345cc01b80d52e8200ff5209", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/bc4188a2f56e821ea057aca6bf444e138d06c252", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:32:08.371Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47296", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-28T19:22:38.048038Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-28T19:22:47.399Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "b3cebfe8c1ca", "lessThan": "9bafc34dc4ad", "versionType": "git"}, {"status": "affected", "version": "b3cebfe8c1ca", "lessThan": "f38527f18905", "versionType": "git"}, {"status": "affected", "version": "b3cebfe8c1ca", "lessThan": "e14ef1095387", "versionType": "git"}, {"status": "affected", "version": "b3cebfe8c1ca", "lessThan": "a4a488915fea", "versionType": "git"}, {"status": "affected", "version": "b3cebfe8c1ca", "lessThan": "bc4188a2f56e", "versionType": "git"}], "programFiles": ["arch/powerpc/kvm/powerpc.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.18"}, {"status": "unaffected", "version": "0", "lessThan": "4.18", "versionType": "custom"}, {"status": "unaffected", "version": "4.19.199", "versionType": "custom", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.136", "versionType": "custom", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.54", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.13.6", "versionType": "custom", "lessThanOrEqual": "5.13.*"}, {"status": "unaffected", "version": "5.14", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["arch/powerpc/kvm/powerpc.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/9bafc34dc4ad0cef18727c557f21ed3c3304df50"}, {"url": "https://git.kernel.org/stable/c/f38527f1890543cdfca8dfd06f75f9887cce6151"}, {"url": "https://git.kernel.org/stable/c/e14ef1095387f764d95614d3ec9e4d07c82a3533"}, {"url": "https://git.kernel.org/stable/c/a4a488915feaad38345cc01b80d52e8200ff5209"}, {"url": "https://git.kernel.org/stable/c/bc4188a2f56e821ea057aca6bf444e138d06c252"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak\n\nvcpu_put is not called if the user copy fails. This can result in preempt\nnotifier corruption and crashes, among other issues."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:05:28.450Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47296", "state": "PUBLISHED", "dateUpdated": "2024-08-04T05:32:08.371Z", "dateReserved": "2024-05-21T13:27:52.130Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-21T14:35:19.341Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}