7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%
An issue was discovered in Linux: KVM through Improper handling of
VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages
being freed while still accessible by the VMM and guest. This allows users
with the ability to start and control a VM to read/write random pages of
memory and can result in local privilege escalation.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 18.04 | noarch | linux | < 4.15.0-159.167 | UNKNOWN |
ubuntu | 20.04 | noarch | linux | < 5.4.0-84.94 | UNKNOWN |
ubuntu | 21.04 | noarch | linux | < 5.11.0-34.36 | UNKNOWN |
ubuntu | 18.04 | noarch | linux-aws | < 4.15.0-1112.119 | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws | < 5.4.0-1056.59 | UNKNOWN |
ubuntu | 21.04 | noarch | linux-aws | < 5.11.0-1017.18 | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws-5.11 | < 5.11.0-1017.18~20.04.1 | UNKNOWN |
ubuntu | 18.04 | noarch | linux-aws-5.4 | < 5.4.0-1056.59~18.04.1 | UNKNOWN |
ubuntu | 16.04 | noarch | linux-aws-hwe | < 4.15.0-1112.119~16.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
ubuntu | 20.04 | noarch | linux-azure | < 5.4.0-1058.60 | UNKNOWN |
github.com/google/security-research/security/advisories/GHSA-7wq5-phmq-m584
github.com/torvalds/linux/commit/f8be156be163a052a067306417cd0ff679068c97
launchpad.net/bugs/cve/CVE-2021-22543
nvd.nist.gov/vuln/detail/CVE-2021-22543
security-tracker.debian.org/tracker/CVE-2021-22543
ubuntu.com/security/notices/USN-5070-1
ubuntu.com/security/notices/USN-5071-1
ubuntu.com/security/notices/USN-5071-2
ubuntu.com/security/notices/USN-5071-3
ubuntu.com/security/notices/USN-5094-1
ubuntu.com/security/notices/USN-5094-2
ubuntu.com/security/notices/USN-5106-1
ubuntu.com/security/notices/USN-5120-1
www.cve.org/CVERecord?id=CVE-2021-22543
www.openwall.com/lists/oss-security/2021/05/26/3
www.openwall.com/lists/oss-security/2021/05/26/4
www.openwall.com/lists/oss-security/2021/05/26/5
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%