CVE-2021-47112

CVE-2021-47112

High · published March 16, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
15.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Teardown PV features on boot CPU as well

Various PV features (Async PF, PV EOI, steal time) work through memory

shared with hypervisor and when we restore from hibernation we must

properly teardown all these features to make sure hypervisor doesn't

write to stale locations after we jump to the previously hibernated kernel

(which can try to place anything there). For secondary CPUs the job is

already done by kvm_cpu_down_prepare(), register syscore ops to do

the same for boot CPU.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00249 · 15.3th percentile
Published
2024-03-16T01:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel< 5.4.1255.4.125
linux/linux_kernel≥ 5.5, < 5.10.435.10.43
linux/linux_kernel≥ 5.11, < 5.12.105.12.10
linux/linux_kernelall versions—
References (8)
EPSS history
Timeline
  • 15 MAR 20:14Z
    x86/kvm: Teardown PV features on boot CPU as well
    cvelistv5