CVE-2021-47296

KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak

State: Published
Severity: 7.8 High
Published: May 21, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak

vcpu_put is not called if the user copy fails. This can result in preempt notifier corruption and crashes, among other issues.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b3cebfe8c1cadf1817939dcc3688a2504a69c662 to before 9bafc34dc4ad0cef18727c557f21ed3c3304df50Affected b3cebfe8c1cadf1817939dcc3688a2504a69c662 to before f38527f1890543cdfca8dfd06f75f9887cce6151Affected b3cebfe8c1cadf1817939dcc3688a2504a69c662 to before e14ef1095387f764d95614d3ec9e4d07c82a3533Affected b3cebfe8c1cadf1817939dcc3688a2504a69c662 to before a4a488915feaad38345cc01b80d52e8200ff5209Affected b3cebfe8c1cadf1817939dcc3688a2504a69c662 to before bc4188a2f56e821ea057aca6bf444e138d06c252Affected
LinuxLinux	4.18Affected before 4.18Not affected 4.19.199 through 4.19.Not affected 5.4.136 through 5.4.Not affected 5.10.54 through 5.10.Not affected 5.13.6 through 5.13.Not affected 5.14 and laterNot affected

Product

Versions

LinuxLinux

b3cebfe8c1cadf1817939dcc3688a2504a69c662 to before 9bafc34dc4ad0cef18727c557f21ed3c3304df50Affected
b3cebfe8c1cadf1817939dcc3688a2504a69c662 to before f38527f1890543cdfca8dfd06f75f9887cce6151Affected
b3cebfe8c1cadf1817939dcc3688a2504a69c662 to before e14ef1095387f764d95614d3ec9e4d07c82a3533Affected
b3cebfe8c1cadf1817939dcc3688a2504a69c662 to before a4a488915feaad38345cc01b80d52e8200ff5209Affected
b3cebfe8c1cadf1817939dcc3688a2504a69c662 to before bc4188a2f56e821ea057aca6bf444e138d06c252Affected

LinuxLinux

4.18Affected
before 4.18Not affected
4.19.199 through 4.19.*Not affected
5.4.136 through 5.4.*Not affected
5.10.54 through 5.10.*Not affected
5.13.6 through 5.13.*Not affected
5.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.