High · published May 6, 2021
A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | < 5.12 | 5.12 |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux_for_real_time | all versions | — |
| redhat/enterprise_linux_for_real_time_for_nfv | all versions | — |
| redhat/enterprise_linux_for_real_time_for_nfv_tus | all versions | — |
| redhat/enterprise_linux_for_real_time_tus | all versions | — |
| fedoraproject/fedora | all versions | — |
| redhat/virtualization | all versions | — |
| redhat/virtualization_host | all versions | — |
| netapp/cloud_backup | all versions | — |
| netapp/solidfire_baseboard_management_controller_firmware | all versions | — |
| netapp/h300s_firmware | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |
| netapp/h300e_firmware | all versions | — |
| netapp/h500e_firmware | all versions | — |
| netapp/h700e_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |
| netapp/h410c_firmware | all versions | — |