CVE-2021-47407

2024-05-2115:15:26

416baaa9-dc9f-4396-8d5f-8c081fb06d67

web.nvd.nist.gov

linux kernel

kvm x86

vulnerability

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Handle SRCU initialization failure during page track init

Check the return of init_srcu_struct(), which can fail due to OOM, when
initializing the page track mechanism. Lack of checking leads to a NULL
pointer deref found by a modified syzkaller.

[Move the call towards the beginning of kvm_arch_init_vm. - Paolo]

References

git.kernel.org/stable/c/4664318f73e496cd22c71b10888e75434a123e23

git.kernel.org/stable/c/deb2949417677649e2413266d7ce8c2ff73952b4

git.kernel.org/stable/c/eb7511bf9182292ef1df1082d23039e856d1ddfb