Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2021-47061
HistoryFeb 29, 2024 - 11:15 p.m.

CVE-2021-47061

2024-02-2923:15:07
Debian Security Bug Tracker
security-tracker.debian.org
3
linux kernel
vulnerability
kvm
i/o bus
devices
unregister failure
use-after-free
sync'ing srcu

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: KVM: Destroy I/O bus devices on unregister failure after sync’ing SRCU If allocating a new instance of an I/O bus fails when unregistering a device, wait to destroy the device until after all readers are guaranteed to see the new null bus. Destroying devices before the bus is nullified could lead to use-after-free since readers expect the devices on their reference of the bus to remain valid.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Related for DEBIANCVE:CVE-2021-47061