Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-47061
HistoryFeb 29, 2024 - 12:00 a.m.

CVE-2021-47061

2024-02-2900:00:00
ubuntu.com
ubuntu.com
4
linux kernel
kvm
vulnerability
resolution
i/o bus
devices
unregister
sync
srcu
use-after-free

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: KVM:
Destroy I/O bus devices on unregister failure after sync’ing SRCU If
allocating a new instance of an I/O bus fails when unregistering a device,
wait to destroy the device until after all readers are guaranteed to see
the new null bus. Destroying devices before the bus is nullified could lead
to use-after-free since readers expect the devices on their reference of
the bus to remain valid.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%