CVE-2021-4032CWE-459

A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvm_free_lapic when a failure allocation was detected

published January 21, 2022

CVSS
—
EPSS
0%
Percentile
32.2
In the wild
Unconfirmed
What it is

A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvm_free_lapic when a failure allocation was detected. In this flaw the KVM subsystem may crash the kernel due to mishandling of memory errors that happens during VCPU construction, which allows an attacker with special user privilege to cause a denial of service. This flaw affects kernel versions prior to 5.15 rc7.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00393 · 32.2th percentile
Weakness
CWE-459 · Incomplete Cleanup
Published
2022-01-21T18:17Z
EPSS history
Timeline
  • 21 JAN 18:17Z
    A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvm_free_lapic when a failure allocation was detected
    cvelistv5