CVE-2021-22543
Summary
| CVE | CVE-2021-22543 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-05-26 11:15:00 UTC |
| Updated | 2023-11-09 14:44:00 UTC |
| Description | An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation. |
Risk And Classification
Problem Types: CWE-119
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| CVE-2021-22543 Linux Kernel Vulnerability in NetApp Products | NetApp Product Security | CONFIRM | security.netapp.com | |
| Linux: KVM VM_IO|VM_PFNMAP vma mishandling · Advisory · google/security-research · GitHub | MISC | github.com | |
| [SECURITY] Fedora 33 Update: kernel-5.12.14-200.fc33 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 33 Update: kernel-5.12.14-200.fc33 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| oss-security - Re: CVE-2021-22543 - /dev/kvm LPE | MLIST | www.openwall.com | |
| oss-security - CVE-2021-22543 - /dev/kvm LPE | MLIST | www.openwall.com | |
| [SECURITY] [DLA 2785-1] linux-4.19 security update | MLIST | lists.debian.org | |
| [SECURITY] Fedora 34 Update: kernel-5.12.14-300.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| oss-security - Re: CVE-2021-22543 - /dev/kvm LPE | MLIST | www.openwall.com | |
| oss-security - Re: CVE-2021-22543 - /dev/kvm LPE | MLIST | www.openwall.com | |
| [SECURITY] [DLA 2843-1] linux security update | MLIST | lists.debian.org | |
| [SECURITY] Fedora 34 Update: kernel-5.12.14-300.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: David Stevens
LEGACY: Kevin Hamacher
LEGACY: Jann Horn
Legacy QID Mappings
- 159329 Oracle Enterprise Linux Security Update for kernel (ELSA-2021-3057)
- 159393 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel (ELSA-2021-9450)
- 159394 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel-container (ELSA-2021-9451)
- 159399 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel (ELSA-2021-9452)
- 159400 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel-container (ELSA-2021-9453)
- 159415 Oracle Enterprise Linux Security Update for kernel (ELSA-2021-3801)
- 178844 Debian Security Update for linux-4.19 (DLA 2785-1)
- 178943 Debian Security Update for linux (DLA 2843-1)
- 179786 Debian Security Update for linux (CVE-2021-22543)
- 198487 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5071-1)
- 198491 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5070-1)
- 198502 Ubuntu Security Notification for Linux kernel (HWE) Vulnerabilities (USN-5071-2)
- 198512 Ubuntu Security Notification for Linux kernel (Raspberry Pi) Vulnerabilities (USN-5071-3)
- 198518 Ubuntu Security Notification for Linux kernel (Raspberry Pi) Vulnerabilities (USN-5094-2)
- 198520 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5094-1)
- 198533 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-5106-1)
- 198548 Ubuntu Security Notification for Linux kernel (Azure) Vulnerabilities (USN-5120-1)
- 239541 Red Hat Update for kernel (RHSA-2021:3057)
- 239542 Red Hat Update for kpatch-patch (RHSA-2021:3044)
- 239543 Red Hat Update for kernel-rt (RHSA-2021:3088)
- 239566 Red Hat Update for kpatch-patch (RHSA-2021:3181)
- 239570 Red Hat Update for kernel (RHSA-2021:3173)
- 239593 Red Hat Update for kpatch-patch (RHSA-2021:3380)
- 239594 Red Hat Update for kernel-rt (RHSA-2021:3375)
- 239599 Red Hat Update for kernel (RHSA-2021:3363)
- 239663 Red Hat Update for kpatch-patch (RHSA-2021:3768)
- 239675 Red Hat Update for kernel-rt (RHSA-2021:3802)
- 239676 Red Hat Update for kernel (RHSA-2021:3801)
- 257119 CentOS Security Update for kernel (CESA-2021:3801)
- 281692 Fedora Security Update for kernel (FEDORA-2021-fe826f202e)
- 281693 Fedora Security Update for kernel (FEDORA-2021-95f2f1cfc7)
- 352799 Amazon Linux Security Advisory for kernel: ALAS2-2021-1699
- 352871 Amazon Linux Security Advisory for kernel : ALAS-2021-1539
- 353147 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.4-2022-004
- 353158 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.10-2022-002
- 353242 Amazon Linux Security Advisory for kernel : ALAC2012-2022-036
- 353243 Amazon Linux Security Advisory for kmod-mlx5 : ALAC2012-2022-037
- 353244 Amazon Linux Security Advisory for kmod-sfc : ALAC2012-2022-038
- 671448 EulerOS Security Update for kernel (EulerOS-SA-2022-1450)
- 750946 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:2647-1)
- 750947 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:2644-1)
- 750949 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:1142-1)
- 750953 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:2645-1)
- 750963 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:2687-1)
- 751437 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:3876-1)
- 751441 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:3876-1)
- 751473 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:3969-1)
- 751476 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:3972-1)
- 940353 AlmaLinux Security Update for kernel (ALSA-2021:3057)
- 960074 Rocky Linux Security Update for kernel (RLSA-2021:3057)
- 960852 Rocky Linux Security Update for kernel-rt (RLSA-2021:3088)