CVE-2021-47060
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
29/02/2024
Last modified:
08/04/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
KVM: Stop looking for coalesced MMIO zones if the bus is destroyed<br />
<br />
Abort the walk of coalesced MMIO zones if kvm_io_bus_unregister_dev()<br />
fails to allocate memory for the new instance of the bus. If it can&#39;t<br />
instantiate a new bus, unregister_dev() destroys all devices _except_ the<br />
target device. But, it doesn&#39;t tell the caller that it obliterated the<br />
bus and invoked the destructor for all devices that were on the bus. In<br />
the coalesced MMIO case, this can result in a deleted list entry<br />
dereference due to attempting to continue iterating on coalesced_zones<br />
after future entries (in the walk) have been deleted.<br />
<br />
Opportunistically add curly braces to the for-loop, which encompasses<br />
many lines but sneaks by without braces due to the guts being a single<br />
if statement.
Impact
Base Score 3.x
6.00
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.4.66 (including) | 5.4.119 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.9 (including) | 5.10.37 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11 (including) | 5.11.21 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.12 (including) | 5.12.4 (excluding) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/168e82f640ed1891a700bdb43e37da354b2ab63c
- https://git.kernel.org/stable/c/2a20592baff59c5351c5200ec667e1a2aa22af85
- https://git.kernel.org/stable/c/50cbad42bfea8c052b7ca590bd4126cdc898713c
- https://git.kernel.org/stable/c/5d3c4c79384af06e3c8e25b7770b6247496b4417
- https://git.kernel.org/stable/c/7d1bc32d6477ff96a32695ea4be8144e4513ab2d
- https://git.kernel.org/stable/c/168e82f640ed1891a700bdb43e37da354b2ab63c
- https://git.kernel.org/stable/c/2a20592baff59c5351c5200ec667e1a2aa22af85
- https://git.kernel.org/stable/c/50cbad42bfea8c052b7ca590bd4126cdc898713c
- https://git.kernel.org/stable/c/5d3c4c79384af06e3c8e25b7770b6247496b4417
- https://git.kernel.org/stable/c/7d1bc32d6477ff96a32695ea4be8144e4513ab2d



