Ubuntu.comUB:CVE-2021-4095CVE-2021-4095
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
5.3%
A NULL pointer dereference was found in the Linux kernel’s KVM when dirty
ring logging is enabled without an active vCPU context. An unprivileged
local attacker on the host may use this flaw to cause a kernel oops
condition and thus a denial of service by issuing a KVM_XEN_HVM_SET_ATTR
ioctl. This flaw affects Linux kernel versions prior to 5.17-rc1.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 22.04 | noarch | linux | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | linux-aws | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | linux-aws-5.15 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | linux-azure | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | linux-azure-5.15 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | linux-azure-fde | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | linux-azure-fde-5.15 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | linux-bluefield | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | linux-gcp | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | linux-gcp-5.15 | < any | UNKNOWN |
References
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=55749769fe608fa3f4a075e42e89d237c8e3763
launchpad.net/bugs/cve/CVE-2021-4095
lore.kernel.org/kvm/CAFcO6XOmoS7EacN_n6v4Txk7xL7iqRa2gABg3F7E3Naf5uG94g@mail.gmail.com/
nvd.nist.gov/vuln/detail/CVE-2021-4095
patchwork.kernel.org/project/kvm/patch/[email protected]/
seclists.org/oss-sec/2021/q4/157
security-tracker.debian.org/tracker/CVE-2021-4095
www.cve.org/CVERecord?id=CVE-2021-4095
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
5.3%