Vulnerability in Linux Kernel
CVE-2021-26930
An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be encountered. In one case, an error encountered earlier might be discarded by later processing, resulting in the caller assuming successful mapping, and hence subsequent operations trying to access space that wasn't mapped. In another case, internal state would be insufficiently updated, preventing safe recovery from the error. This affects drivers/block/xen-blkback/blkback.c.
EPSS: 0.003 (27.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux Linux_kernel
- Debian Debian_linux — versions 9.0
- Fedoraproject Fedora — versions 32, 33
- N/a — versions n/a
References
- cve@mitre.org (Patch, Third Party Advisory)
- cve@mitre.org (vendor-advisory)
- cve@mitre.org (vendor-advisory)
- cve@mitre.org (mailing-list, Mailing List, Third Party Advisory)
- cve@mitre.org (Third Party Advisory)
- cve@mitre.org (mailing-list, Mailing List, Third Party Advisory)
- cve@mitre.org
Frequently asked questions
- What is CVE-2021-26930?
- CVE-2021-26930 is a high-severity vulnerability in Linux Kernel. CVSS score: 7.8/10. Published 2021-02-17.
- How severe is CVE-2021-26930?
- High severity. CVSS v3 base score is 7.8 out of 10.