CVE-2021-46977

CVE-2021-46977

High · published February 28, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
14.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

KVM: VMX: Disable preemption when probing user return MSRs

Disable preemption when probing a user return MSR via RDSMR/WRMSR. If

the MSR holds a different value per logical CPU, the WRMSR could corrupt

the host's value if KVM is preempted between the RDMSR and WRMSR, and

then rescheduled on a different CPU.

Opportunistically land the helper in common x86, SVM will use the helper

in a future commit.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00243 · 14.6th percentile
Published
2024-02-28T14:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 5.5, < 5.10.385.10.38
linux/linux_kernel≥ 5.11, < 5.11.225.11.22
linux/linux_kernel≥ 5.12, < 5.12.55.12.5
linux/linux_kernelall versions—
References (8)
EPSS history
Timeline
  • 28 FEB 08:13Z
    KVM: VMX: Disable preemption when probing user return MSRs
    cvelistv5