CVE-2021-4095CWE-476

A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context

published March 8, 2022

CVSS
—
EPSS
0%
Percentile
31.6
In the wild
Unconfirmed
What it is

A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context. An unprivileged local attacker on the host may use this flaw to cause a kernel oops condition and thus a denial of service by issuing a KVM_XEN_HVM_SET_ATTR ioctl. This flaw affects Linux kernel versions prior to 5.17-rc1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00387 · 31.6th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2022-03-08T14:05Z
EPSS history
Timeline
  • 08 MAR 14:05Z
    A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context
    cvelistv5