CVE-2021-46967
Last modified
CVE-2021-46967 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping The virtqueue doorbell is usually implemented via registeres but we don't provide the necessary vma->flags like VM_PFNMAP. This may cause several issues e.g when userspace tries to map the doorbell via vhost IOTLB, kernel may panic due to the page is not backed by page structure. EPSS estimates a 0.22% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping The virtqueue doorbell is usually implemented via registeres but we don't provide the necessary vma->flags like VM_PFNMAP. This may cause several issues e.g when userspace tries to map the doorbell via vhost IOTLB, kernel may panic due to the page is not backed by page structure. This patch fixes this by setting the necessary vm_flags. With this patch, try to map doorbell via IOTLB will fail with bad address.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.8, < 5.10.36 |
| Linux | Linux Kernel | >= 5.11, < 5.11.20 |
| Linux | Linux Kernel | >= 5.12, < 5.12.3 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-46967?
How severe is CVE-2021-46967?
How do I fix CVE-2021-46967?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-46961In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2021-46962In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2021-46963In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2021-46964In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2021-46965In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2021-46966In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2021-46968In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2021-46969In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2021-46970In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2021-46971In the Linux kernel, the following vulnerability has been re…3.3
- CVE-2021-46972In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2021-46973In the Linux kernel, the following vulnerability has been re…7.8
Are you affected by CVE-2021-46967?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST