Back to bug 2027403

Who When What Removed Added
Guilherme de Almeida Suckevicz 2021-11-29 14:56:14 UTC Summary kernel: kvm: mishandling of memory error during VCPU construction can lead to DoS CVE-2021-4032 kernel: kvm: mishandling of memory error during VCPU construction can lead to DoS
Alias CVE-2021-4032
Guilherme de Almeida Suckevicz 2021-11-29 14:56:38 UTC Blocks 2027405
Guilherme de Almeida Suckevicz 2021-11-29 14:58:35 UTC Depends On 2027406
Rohit Keshri 2021-12-05 18:57:14 UTC CC blc, mlangsdo
Rohit Keshri 2021-12-05 19:41:42 UTC Comment 0 updated
Rohit Keshri 2021-12-05 19:42:04 UTC CC rkeshri
Rohit Keshri 2021-12-05 19:43:51 UTC Doc Text A vulnerability was found in the KVM subsystem in arch/x86/kvm/lapic.c kvm_free_lapic when the failure allocation was detected. In this flaw the KVM subsystem may crash the kernel due to mishandling of memory errors that happens during VCPU construction, which allows an attacker with special user privilege to cause a denial of service.
Rohit Keshri 2021-12-05 20:00:31 UTC Depends On 2029215, 2029213, 2029214
Rohit Keshri 2021-12-05 20:01:36 UTC Fixed In Version kernel 5.15 rc7
Eric Christensen 2021-12-06 20:35:26 UTC Doc Text A vulnerability was found in the KVM subsystem in arch/x86/kvm/lapic.c kvm_free_lapic when the failure allocation was detected. In this flaw the KVM subsystem may crash the kernel due to mishandling of memory errors that happens during VCPU construction, which allows an attacker with special user privilege to cause a denial of service. A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvm_free_lapic when a failure allocation was detected. In this flaw the KVM subsystem may crash the kernel due to mishandling of memory errors that happens during VCPU construction, which allows an attacker with special user privilege to cause a denial of service.
Jon Maloy 2021-12-10 23:06:59 UTC Flags needinfo?(rkeshri)
CC jmaloy
Rohit Keshri 2021-12-14 04:33:35 UTC Flags needinfo?(rkeshri)
Florencio Cano 2021-12-20 14:43:22 UTC CC bdettelb
Red Hat Bugzilla 2022-06-04 08:04:59 UTC CC fpacheco
Red Hat Bugzilla 2022-07-16 03:21:07 UTC CC brdeoliv
Red Hat Bugzilla 2022-12-31 23:35:24 UTC CC fhrbata
Red Hat Bugzilla 2023-04-01 08:40:49 UTC CC dhoward
Red Hat Bugzilla 2023-07-07 08:32:27 UTC Assignee security-response-team nobody

Back to bug 2027403