PT-2024-11057 · Linux+1 · Linux Kernel+1

Published 2024-02-27 · Updated 2024-05-30 · CVE-2021-46907

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to KVM: VMX, where vmx handle exit() uses vcpu->run->internal.ndata as an index for an array access. Since vcpu->run can be mapped to a user address space with writer permission, the ndata could be updated by a user process at any time, potentially setting it outside the bounds of the array. This makes it unsafe for vmx handle exit() to use ndata in this way.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-46907

SUSE-SU-2024:1870-1

Affected Products

Linux Kernel

Suse

References · 416

• https://nvd.nist.gov/vuln/detail/CVE-2021-46907 · Security Note
• https://cve.org/CVERecord?id=CVE-2021-46907 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:1870-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-46907 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-46907 · Vendor Advisory
• https://bugzilla.suse.com/1223819 · Note
• https://bugzilla.suse.com/1223744 · Note
• https://suse.com/security/cve/CVE-2021-46939 · Note
• https://bugzilla.suse.com/1223315 · Note
• https://bugzilla.suse.com/1223060 · Note
• https://suse.com/security/cve/CVE-2021-47162 · Note
• https://suse.com/security/cve/CVE-2021-46988 · Note
• https://bugzilla.suse.com/1222888 · Note
• https://bugzilla.suse.com/1220777 · Note
• https://bugzilla.suse.com/1221934 · Note