PT-2024-11164 · Linux+2 · Linux Kernel+2

Andrea Righi + 4 · Published 2021-05-07 · Updated 2024-08-19 · CVE-2021-47112

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns the Linux kernel, where various PV features (Async PF, PV EOI, steal time) work through memory shared with the hypervisor. When restoring from hibernation, these features must be properly torn down to prevent the hypervisor from writing to stale locations after jumping to the previously hibernated kernel. The job is already done for secondary CPUs by kvm cpu down prepare(), and syscore ops are registered to do the same for the boot CPU.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-459

Related Identifiers

BDU:2025-13692

CVE-2021-47112

OESA-2024-1392

OESA-2024-1393

OPENSUSE-SU-2024_1489-1

SUSE-SU-2024:1454-1

SUSE-SU-2024:1465-1

SUSE-SU-2024:1489-1

SUSE-SU-2024:1643-1

SUSE-SU-2024:1646-1

SUSE-SU-2024:1870-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 650

• https://git.kernel.org/stable/c/d1629b5b925de9b27979e929dae7fcb766daf6b6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-26597 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-46924 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-46935 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-23307 · Security Note
• https://git.kernel.org/stable/c/7620a669111b52f224d006dea9e1e688e2d62c54 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1646-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47112 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26606 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-36784 · Security Note
• https://git.kernel.org/stable/c/8b79feffeca28c5459458fe78676b081e87c93a4 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1454-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46926 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-24855 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-26622 · Security Note