Lucene search

[email protected]CVE-2021-22543

HistoryMay 26, 2021 - 11:15 a.m.

CVE-2021-22543

2021-05-2611:15:08

CWE-119

[email protected]

web.nvd.nist.gov

455

linux

kvm

cve-2021-22543

security

vulnerability

local privilege escalation

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.7 High

CVSS4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/SC:H/VI:H/SI:H/VA:L/SA:L

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation.

Affected configurations

NVD

Node

linuxlinux_kernelMatch2021-05-18

Node

fedoraprojectfedoraMatch33

fedoraprojectfedoraMatch34

Node

debiandebian_linuxMatch9.0

Node

netapph410c_firmwareMatch-

AND

netapph410cMatch-

Node

netapph300s_firmwareMatch-

AND

netapph300sMatch-

Node

netapph500s_firmwareMatch-

AND

netapph500sMatch-

Node

netapph700s_firmwareMatch-

AND

netapph700sMatch-

Node

netapph300e_firmwareMatch-

AND

netapph300eMatch-

Node

netapph500e_firmwareMatch-

AND

netapph500eMatch-

Node

netapph700e_firmwareMatch-

AND

netapph700eMatch-

Node

netapph410s_firmwareMatch-

AND

netapph410sMatch-

Node

netappcloud_backupMatch-

netappsolidfire_baseboard_management_controller_firmwareMatch-

CPENameOperatorVersion
linux:linux_kernellinux linux kerneleq2021-05-18

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	eq	2021-05-18

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Linux Kernel",
    "repo": "https://github.com/torvalds/linux",
    "vendor": "Linux Kernel",
    "versions": [
      {
        "lessThan": "f8be156be163a052a067306417cd0ff679068c97",
        "status": "affected",
        "version": "add6a0cd1c5ba51b201e1361b05a5df817083618",
        "versionType": "git"
      }
    ]
  }
]