Buffer overflow in Linux Kernel
CVE-2021-22543
An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.007 (51.6th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 52nd percentile — 51.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.007 · newest: 0.007 · change: 0.000
Affected products
- Linux Kernel — versions 2021-05-18
- Linux Kernel — versions add6a0cd1c5ba51b201e1361b05a5df817083618
- NetApp Cloud Backup
- NetApp H300e
- NetApp H300e Firmware
- NetApp H300s
- NetApp H300s Firmware
- NetApp H410c
- NetApp H410c Firmware
- NetApp H410s
Weakness classification (CWE)
Public proof-of-concept exploits
References
- github.com/google/security-research/security/advisories/GHSA-7wq5-phmq-m584 (Exploit, Third Party Advisory)
- www.openwall.com/lists/oss-security/2021/06/26/1 (mailing-list, Mailing List)
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/… (vendor-advisory)
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/… (vendor-advisory)
- security.netapp.com/advisory/ntap-20210708-0002/ (Third Party Advisory)
- lists.debian.org/debian-lts-announce/2021/10/msg00010.html (mailing-list, Mailing List, Third Party Advisory)
- lists.debian.org/debian-lts-announce/2021/12/msg00012.html (mailing-list, Mailing List, Third Party Advisory)
Frequently asked questions
- What is CVE-2021-22543?
- CVE-2021-22543 is a high-severity vulnerability in Linux Kernel, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.8/10. Published 2021-05-26.
- How severe is CVE-2021-22543?
- High severity. CVSS v3 base score is 7.8 out of 10.
- Is CVE-2021-22543 known to be exploited?
- 8 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.