CVE-2021-47060

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
29/02/2024
Last modified:
08/04/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> KVM: Stop looking for coalesced MMIO zones if the bus is destroyed<br /> <br /> Abort the walk of coalesced MMIO zones if kvm_io_bus_unregister_dev()<br /> fails to allocate memory for the new instance of the bus. If it can&amp;#39;t<br /> instantiate a new bus, unregister_dev() destroys all devices _except_ the<br /> target device. But, it doesn&amp;#39;t tell the caller that it obliterated the<br /> bus and invoked the destructor for all devices that were on the bus. In<br /> the coalesced MMIO case, this can result in a deleted list entry<br /> dereference due to attempting to continue iterating on coalesced_zones<br /> after future entries (in the walk) have been deleted.<br /> <br /> Opportunistically add curly braces to the for-loop, which encompasses<br /> many lines but sneaks by without braces due to the guts being a single<br /> if statement.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.4.66 (including) 5.4.119 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.9 (including) 5.10.37 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.11.21 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.12 (including) 5.12.4 (excluding)