PT-2024-11076 · Linux · Linux Kernel

Jason Wang · Published 2021-05-03 · Updated 2024-12-06 · CVE-2021-46967

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the virtqueue doorbell mapping in the Linux kernel. The virtqueue doorbell is usually implemented via registers, but the necessary vma->flags like VM PFNMAP are not provided. This may cause several issues, such as a kernel panic, when userspace tries to map the doorbell via vhost IOTLB. The patch fixes this by setting the necessary vm flags, causing attempts to map the doorbell via IOTLB to fail with a bad address.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-230

Related Identifiers

BDU:2025-02990

CVE-2021-46967

Affected Products

Linux Kernel

References · 22

• https://nvd.nist.gov/vuln/detail/CVE-2021-46967 · Security Note
• https://git.kernel.org/stable/c/3a3e0fad16d40a2aa68ddf7eea4acdf48b22dd44 · Patch
• https://osv.dev/vulnerability/CVE-2021-46967 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-46967 · Security Note
• https://git.kernel.org/stable/c/3b8b6399666a29daa30b0bb3f5c9e3fc81c5a6a6 · Patch
• https://security-tracker.debian.org/tracker/CVE-2021-46967 · Vendor Advisory
• https://git.kernel.org/stable/c/93dbbf20e3ffad14f04227a0b7105f6e6f0387ce · Patch
• https://git.kernel.org/stable/c/940230a5c31e2714722aee04c521a21f484b4df7 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-46967 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02990 · Security Note
• https://ubuntu.com/security/CVE-2021-46967 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-46967 · Vendor Advisory
• https://git.linuxtesting.ru/pub/scm/linux/kernel/git/lvc/linux-stable.git/commit/?h=v5.10.176-lvc1&id=3b8b6399666a29daa30b0bb3f5c9e3fc81c5a6a6 · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.36 · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.3 · Note