Riskcovery

CVE-2021-47407

KVM: x86: Handle SRCU initialization failure during page track init

State
Published
Severity
Not scored
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Handle SRCU initialization failure during page track init

Check the return of init_srcu_struct(), which can fail due to OOM, when initializing the page track mechanism. Lack of checking leads to a NULL pointer deref found by a modified syzkaller.

[Move the call towards the beginning of kvm_arch_init_vm. - Paolo]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0eb05bf290cfe8610d9680b49abef37febd1c38a to before deb2949417677649e2413266d7ce8c2ff73952b4Affected
  • 0eb05bf290cfe8610d9680b49abef37febd1c38a to before 4664318f73e496cd22c71b10888e75434a123e23Affected
  • 0eb05bf290cfe8610d9680b49abef37febd1c38a to before eb7511bf9182292ef1df1082d23039e856d1ddfbAffected
LinuxLinux
  • 4.6Affected
  • before 4.6Not affected
  • 5.10.71 through 5.10.*Not affected
  • 5.14.10 through 5.14.*Not affected
  • 5.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.