CVE-2021-4095

State: Published
Severity: Not scored
Published: Mar 8, 2022
Updated: Aug 3, 2024
Reserved: Dec 10, 2021

Description

A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context. An unprivileged local attacker on the host may use this flaw to cause a kernel oops condition and thus a denial of service by issuing a KVM_XEN_HVM_SET_ATTR ioctl. This flaw affects Linux kernel versions prior to 5.17-rc1.

Scores

The record has no CVSS score.

Weaknesses

CWE-476

Affected Products

Product	Versions
kerneln/a	Linux kernel versions prior to 5.17-rc1Affected

References

[oss-security] 20220117 Re: CVE-2021-4095: kernel: KVM: NULL pointer dereference in kvm_dirty_ring_get() in virt/kvm/dirty_ring.cmailing-list
https://bugzilla.redhat.com/show_bug.cgi?id=2031194
FEDORA-2022-0816754490vendor-advisory
FEDORA-2022-8efcea6e67vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.