CVE-2021-47060

CVE-2021-47060

High · published March 1, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
14.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

KVM: Stop looking for coalesced MMIO zones if the bus is destroyed

Abort the walk of coalesced MMIO zones if kvm_io_bus_unregister_dev()

fails to allocate memory for the new instance of the bus. If it can't

instantiate a new bus, unregister_dev() destroys all devices _except_ the

target device. But, it doesn't tell the caller that it obliterated the

bus and invoked the destructor for all devices that were on the bus. In

the coalesced MMIO case, this can result in a deleted list entry

dereference due to attempting to continue iterating on coalesced_zones

after future entries (in the walk) have been deleted.

Opportunistically add curly braces to the for-loop, which encompasses

many lines but sneaks by without braces due to the guts being a single

if statement.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00240 · 14.3th percentile
Published
2024-03-01T04:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 5.4.66, < 5.4.1195.4.119
linux/linux_kernel≥ 5.9, < 5.10.375.10.37
linux/linux_kernel≥ 5.11, < 5.11.215.11.21
linux/linux_kernel≥ 5.12, < 5.12.45.12.4
References (10)
EPSS history
Timeline
  • 29 FEB 22:37Z
    KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
    cvelistv5