CVE-2021-47035

CVE-2021-47035

High · published February 28, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
16.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Remove WO permissions on second-level paging entries

When the first level page table is used for IOVA translation, it only

supports Read-Only and Read-Write permissions. The Write-Only permission

is not supported as the PRESENT bit (implying Read permission) should

always set. When using second level, we still give separate permissions

that allows WriteOnly which seems inconsistent and awkward. We want to

have consistent behavior. After moving to 1st level, we don't want things

to work sometimes, and break if we use 2nd level for the same mappings.

Hence remove this configuration.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00258 · 16.5th percentile
Published
2024-02-28T14:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 5.6, < 5.10.375.10.37
linux/linux_kernel≥ 5.11, < 5.11.215.11.21
linux/linux_kernel≥ 5.12, < 5.12.45.12.4
References (9)
EPSS history
Timeline
  • 28 FEB 08:13Z
    iommu/vt-d: Remove WO permissions on second-level paging entries
    cvelistv5