VAR-202105-1451

Vulnerability from variot - Updated: 2026-04-10 23:33

An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation. Linux Kernel Is vulnerable to a buffer error.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. Arch Linux is an application system of Arch open source. A lightweight and flexible Linux® distribution that tries to keep it simple. (BZ#2010171)

These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks.

Bug Fix(es):

Rebase package(s) to version: 1.2.23

Highlights, important fixes, or notable enhancements:

imgbase should not copy the selinux binary policy file (BZ# 1979624) (BZ#1989397)
RHV-H has been rebased on Red Hat Enterprise Linux 8.4 Batch #2. (BZ#1975177)
8) - x86_64
Description:

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Bug Fix(es):

kernel-rt: update RT source tree to the RHEL-8.4.z source tree (BZ#1985050)
kernel-rt: Merge mm/memcg: Fix kmem_cache_alloc() performance regression (BZ#1987102)
8.2) - aarch64, noarch, ppc64le, s390x, x86_64

Bug Fix(es):

[Regression] RHEL8.2 - ISST-LTE:pVM:diapvmlp83:sum:memory DLPAR fails to add memory on multiple trials[mm/memory_hotplug.c:1163] (mm-) (BZ#1930169)
Every server is displaying the same power levels for all of our i40e 25G interfaces. 10G interfaces seem to be correct. Ethtool version is 5.0 (BZ#1967100)
s390/uv: Fix handling of length extensions (BZ#1975657)
RHEL 8.3 using FCOE via a FastLinQ QL45000 card will not manually scan in LUN from Target_id's over 8 (BZ#1976265)
Backport "tick/nohz: Conditionally restart tick on idle exit" to RHEL 8.5 (BZ#1978711)
rhel8.3: phase 2 netfilter backports from upstream (BZ#1980323)
xfrm: backports from upstream (BZ#1981841)

Enhancement(s):

[8.2.z] Incorrect parsing of ACPI HMAT table reports incorrect kernel WARNING taint (BZ#1943702)
Only selected patches from [IBM 8.4 FEAT] ibmvnic: Backport FW950 and assorted bug fixes (BZ#1980795)
========================================================================== Ubuntu Security Notice USN-5071-3 September 22, 2021

linux-raspi, linux-raspi-5.4 vulnerabilities

A security issue affects these releases of Ubuntu and its derivatives:

Ubuntu 20.04 LTS
Ubuntu 18.04 LTS

Summary:

Several security issues were fixed in the Linux kernel.

Software Description: - linux-raspi: Linux kernel for Raspberry Pi (V8) systems - linux-raspi-5.4: Linux kernel for Raspberry Pi (V8) systems

Details:

It was discovered that the KVM hypervisor implementation in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. An attacker who could start and control a VM could possibly use this to expose sensitive information or execute arbitrary code. (CVE-2021-22543)

Murray McAllister discovered that the joystick device interface in the Linux kernel did not properly validate data passed via an ioctl(). A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code on systems with a joystick device registered. (CVE-2021-3612)

Update instructions:

The problem can be corrected by updating your system to the following package versions:

Ubuntu 20.04 LTS: linux-image-5.4.0-1043-raspi 5.4.0-1043.47 linux-image-raspi 5.4.0.1043.78 linux-image-raspi2 5.4.0.1043.78

Ubuntu 18.04 LTS: linux-image-5.4.0-1043-raspi 5.4.0-1043.47~18.04.1 linux-image-raspi-hwe-18.04 5.4.0.1043.46

After a standard system update you need to reboot your computer to make all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. 7.7) - ppc64le, x86_64

Description:

This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256

===================================================================== Red Hat Security Advisory

Synopsis: Important: kernel security and bug fix update Advisory ID: RHSA-2021:3987-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:3987 Issue date: 2021-10-26 CVE Names: CVE-2019-20934 CVE-2020-36385 CVE-2021-3653 CVE-2021-3656 CVE-2021-22543 CVE-2021-37576 =====================================================================

Summary:

An update for kernel is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7.7 Telco Extended Update Support, and Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Relevant releases/architectures:

Red Hat Enterprise Linux Server AUS (v. 7.7) - noarch, x86_64 Red Hat Enterprise Linux Server E4S (v. 7.7) - noarch, ppc64le, x86_64 Red Hat Enterprise Linux Server Optional AUS (v. 7.7) - x86_64 Red Hat Enterprise Linux Server Optional E4S (v. 7.6) - ppc64le, x86_64 Red Hat Enterprise Linux Server Optional TUS (v. 7.7) - x86_64 Red Hat Enterprise Linux Server TUS (v. 7.7) - noarch, x86_64

Description:

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Bug Fix(es):

A race between i40e_ndo_set_vf_mac() and i40e_vsi_clear() in the i40e driver causes a use after free condition of the kmalloc-4096 slab cache. (BZ#1980333)
Solution:

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Package List:

Red Hat Enterprise Linux Server AUS (v. 7.7):

Source: kernel-3.10.0-1062.59.1.el7.src.rpm

noarch: kernel-abi-whitelists-3.10.0-1062.59.1.el7.noarch.rpm kernel-doc-3.10.0-1062.59.1.el7.noarch.rpm

x86_64: bpftool-3.10.0-1062.59.1.el7.x86_64.rpm bpftool-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm kernel-3.10.0-1062.59.1.el7.x86_64.rpm kernel-debug-3.10.0-1062.59.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-1062.59.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-1062.59.1.el7.x86_64.rpm kernel-devel-3.10.0-1062.59.1.el7.x86_64.rpm kernel-headers-3.10.0-1062.59.1.el7.x86_64.rpm kernel-tools-3.10.0-1062.59.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-1062.59.1.el7.x86_64.rpm perf-3.10.0-1062.59.1.el7.x86_64.rpm perf-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm python-perf-3.10.0-1062.59.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm

Red Hat Enterprise Linux Server E4S (v. 7.7):

Source: kernel-3.10.0-1062.59.1.el7.src.rpm

noarch: kernel-abi-whitelists-3.10.0-1062.59.1.el7.noarch.rpm kernel-doc-3.10.0-1062.59.1.el7.noarch.rpm

ppc64le: bpftool-3.10.0-1062.59.1.el7.ppc64le.rpm bpftool-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm kernel-3.10.0-1062.59.1.el7.ppc64le.rpm kernel-bootwrapper-3.10.0-1062.59.1.el7.ppc64le.rpm kernel-debug-3.10.0-1062.59.1.el7.ppc64le.rpm kernel-debug-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm kernel-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-1062.59.1.el7.ppc64le.rpm kernel-devel-3.10.0-1062.59.1.el7.ppc64le.rpm kernel-headers-3.10.0-1062.59.1.el7.ppc64le.rpm kernel-tools-3.10.0-1062.59.1.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm kernel-tools-libs-3.10.0-1062.59.1.el7.ppc64le.rpm perf-3.10.0-1062.59.1.el7.ppc64le.rpm perf-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm python-perf-3.10.0-1062.59.1.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm

Red Hat Enterprise Linux Server TUS (v. 7.7):

Source: kernel-3.10.0-1062.59.1.el7.src.rpm

noarch: kernel-abi-whitelists-3.10.0-1062.59.1.el7.noarch.rpm kernel-doc-3.10.0-1062.59.1.el7.noarch.rpm

Red Hat Enterprise Linux Server Optional AUS (v. 7.7):

x86_64: bpftool-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-1062.59.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-1062.59.1.el7.x86_64.rpm perf-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm

Red Hat Enterprise Linux Server Optional E4S (v. 7.6):

ppc64le: bpftool-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm kernel-debug-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm kernel-debug-devel-3.10.0-1062.59.1.el7.ppc64le.rpm kernel-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-1062.59.1.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm kernel-tools-libs-devel-3.10.0-1062.59.1.el7.ppc64le.rpm perf-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm

Red Hat Enterprise Linux Server Optional TUS (v. 7.7):

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/

References:

https://access.redhat.com/security/cve/CVE-2019-20934 https://access.redhat.com/security/cve/CVE-2020-36385 https://access.redhat.com/security/cve/CVE-2021-3653 https://access.redhat.com/security/cve/CVE-2021-3656 https://access.redhat.com/security/cve/CVE-2021-22543 https://access.redhat.com/security/cve/CVE-2021-37576 https://access.redhat.com/security/updates/classification/#important

Contact:

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/

iQIVAwUBYXew09zjgjWX9erEAQh/NRAAlpTOJdaVIZiu4IJtVrtRh2JGkgTlL2Pi KIpqyIeBFsUwRh0pg9GE10q4NRk/DqMYTXvc2GJaNUZlRbzEhLxZXKqksfea6kmo wwGdORkerZrbE8QYF/FRC/6Bxi99lvoH0rSEeJeX0bM6vVwu9ubp7Xbdp4hmq08S 1VsG5ftGK6hQJPyxVDgPIHK1FHE5dVz1puyM10eY5NgabKCdD8oCC9/OL1hxFjAv ADTfFombilFItZoYa9rQdpoQ7s5CBZ1H6VbA+d9CvUltfzRzr6EUflL/rM3af3s1 PTSGqTSqdAZRoebwFvqKlHSoK2B7Wrinxs0kIGbvf3S2MbGklfzb6GaB4QZZ490T WRuTiJZTvMP0jqQyW0nTCMbxfqo3NgKbQt2wQSGYYDlwq65vhuuQAghGVPEoBPhS T9inwoSthoj7uxni1E58TXwPhzfEPXSTAkEZvu05BLt1AXRA+RrNH/B7VIHx30oX fkdz6MFeO/SWIb/CWf5YQVD3Xfsk+9rg2JWGWjnAE2WV9lhsVqhlidL36uaL6kmA LGrb/ZQcsVIPIM+HQRme15MBsg3GervoIHWkWOPbXvU4fYHxID2YkLMZQ6vtGHE2 DHe1+11yo2WKvdWB5nrbsIDBYBJLKT12DxsbycCeH2rLS7qDsfw/XDshAaFnPXZM G9cg8fFnilE= =hTrt -----END PGP SIGNATURE-----

-- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce

Show details on source website

JSON

To clipboard

{
  "affected_products": {
    "_id": null,
    "data": [
      {
        "_id": null,
        "model": "h300s",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "h410s",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "34"
      },
      {
        "_id": null,
        "model": "solidfire baseboard management controller",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "h410c",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "h500e",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "9.0"
      },
      {
        "_id": null,
        "model": "h700s",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "kernel",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "linux",
        "version": "2021-05-18"
      },
      {
        "_id": null,
        "model": "h300e",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "33"
      },
      {
        "_id": null,
        "model": "cloud backup",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "h700e",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "h500s",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "kernel",
        "scope": null,
        "trust": 0.8,
        "vendor": "linux",
        "version": null
      },
      {
        "_id": null,
        "model": "solidfire baseboard management controller",
        "scope": null,
        "trust": 0.8,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "baseboard management controller",
        "scope": null,
        "trust": 0.8,
        "vendor": "netapp",
        "version": null
      },
      {
        "_id": null,
        "model": "fedora",
        "scope": null,
        "trust": 0.8,
        "vendor": "fedora",
        "version": null
      },
      {
        "_id": null,
        "model": "gnu/linux",
        "scope": null,
        "trust": 0.8,
        "vendor": "debian",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-007425"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-22543"
      }
    ]
  },
  "credits": {
    "_id": null,
    "data": "Red Hat",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "164565"
      },
      {
        "db": "PACKETSTORM",
        "id": "163926"
      },
      {
        "db": "PACKETSTORM",
        "id": "163770"
      },
      {
        "db": "PACKETSTORM",
        "id": "164469"
      },
      {
        "db": "PACKETSTORM",
        "id": "163995"
      },
      {
        "db": "PACKETSTORM",
        "id": "164666"
      },
      {
        "db": "PACKETSTORM",
        "id": "164652"
      }
    ],
    "trust": 0.7
  },
  "cve": "CVE-2021-22543",
  "cvss": {
    "_id": null,
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.6,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 3.9,
            "id": "CVE-2021-22543",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.9,
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.6,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 3.9,
            "id": "VHN-380980",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:L/AC:L/AU:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 1.8,
            "id": "CVE-2021-22543",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Local",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 7.8,
            "baseSeverity": "High",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2021-22543",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "Low",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2021-22543",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2021-22543",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202105-1684",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-380980",
            "trust": 0.1,
            "value": "MEDIUM"
          },
          {
            "author": "VULMON",
            "id": "CVE-2021-22543",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-380980"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-22543"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202105-1684"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-007425"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-22543"
      }
    ]
  },
  "description": {
    "_id": null,
    "data": "An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation. Linux Kernel Is vulnerable to a buffer error.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. Arch Linux is an application system of Arch open source. A lightweight and flexible Linux\u00ae distribution that tries to keep it simple. (BZ#2010171)\n\n4. \nThese packages include redhat-release-virtualization-host, ovirt-node, and\nrhev-hypervisor. RHVH features a Cockpit user interface for\nmonitoring the host\u0027s resources and performing administrative tasks. \n\nBug Fix(es):\n\n* Rebase package(s) to version: 1.2.23\n\nHighlights, important fixes, or notable enhancements: \n\n* imgbase should not copy the selinux binary policy file (BZ# 1979624)\n(BZ#1989397)\n\n* RHV-H has been rebased on Red Hat Enterprise Linux 8.4 Batch #2. \n(BZ#1975177)\n\n4. 8) - x86_64\n\n3. Description:\n\nThe kernel-rt packages provide the Real Time Linux Kernel, which enables\nfine-tuning for systems with extremely high determinism requirements. \n\nBug Fix(es):\n\n* kernel-rt: update RT source tree to the RHEL-8.4.z source tree\n(BZ#1985050)\n\n* kernel-rt: Merge mm/memcg: Fix kmem_cache_alloc() performance regression\n(BZ#1987102)\n\n4. 8.2) - aarch64, noarch, ppc64le, s390x, x86_64\n\n3. \n\nBug Fix(es):\n\n* [Regression] RHEL8.2 - ISST-LTE:pVM:diapvmlp83:sum:memory DLPAR fails to\nadd memory on multiple trials[mm/memory_hotplug.c:1163] (mm-) (BZ#1930169)\n\n* Every server is displaying the same power levels for all of our i40e  25G\ninterfaces. 10G interfaces seem to be correct. Ethtool version is 5.0\n(BZ#1967100)\n\n* s390/uv: Fix handling of length extensions (BZ#1975657)\n\n* RHEL 8.3 using FCOE via a FastLinQ QL45000 card will not manually scan in\nLUN from Target_id\u0027s over 8 (BZ#1976265)\n\n* Backport \"tick/nohz: Conditionally restart tick on idle exit\" to RHEL 8.5\n(BZ#1978711)\n\n* rhel8.3: phase 2 netfilter backports from upstream (BZ#1980323)\n\n* xfrm: backports from upstream (BZ#1981841)\n\nEnhancement(s):\n\n* [8.2.z] Incorrect parsing of ACPI HMAT table reports incorrect kernel\nWARNING taint (BZ#1943702)\n\n* Only selected patches from [IBM 8.4 FEAT] ibmvnic: Backport FW950 and\nassorted bug fixes (BZ#1980795)\n\n4. ==========================================================================\nUbuntu Security Notice USN-5071-3\nSeptember 22, 2021\n\nlinux-raspi, linux-raspi-5.4 vulnerabilities\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 20.04 LTS\n- Ubuntu 18.04 LTS\n\nSummary:\n\nSeveral security issues were fixed in the Linux kernel. \n\nSoftware Description:\n- linux-raspi: Linux kernel for Raspberry Pi (V8) systems\n- linux-raspi-5.4: Linux kernel for Raspberry Pi (V8) systems\n\nDetails:\n\nIt was discovered that the KVM hypervisor implementation in the Linux\nkernel did not properly perform reference counting in some situations,\nleading to a use-after-free vulnerability. An attacker who could start and\ncontrol a VM could possibly use this to expose sensitive information or\nexecute arbitrary code. (CVE-2021-22543)\n\nMurray McAllister discovered that the joystick device interface in the\nLinux kernel did not properly validate data passed via an ioctl(). A local\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code on systems with a joystick device\nregistered. (CVE-2021-3612)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 20.04 LTS:\n  linux-image-5.4.0-1043-raspi    5.4.0-1043.47\n  linux-image-raspi               5.4.0.1043.78\n  linux-image-raspi2              5.4.0.1043.78\n\nUbuntu 18.04 LTS:\n  linux-image-5.4.0-1043-raspi    5.4.0-1043.47~18.04.1\n  linux-image-raspi-hwe-18.04     5.4.0.1043.46\n\nAfter a standard system update you need to reboot your computer to make\nall the necessary changes. \n\nATTENTION: Due to an unavoidable ABI change the kernel updates have\nbeen given a new version number, which requires you to recompile and\nreinstall all third party kernel modules you might have installed. \nUnless you manually uninstalled the standard kernel metapackages\n(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,\nlinux-powerpc), a standard system upgrade will automatically perform\nthis as well. 7.7) - ppc64le, x86_64\n\n3. Description:\n\nThis is a kernel live patch module which is automatically loaded by the RPM\npost-install script to modify the code of a running kernel. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=====================================================================\n                   Red Hat Security Advisory\n\nSynopsis:          Important: kernel security and bug fix update\nAdvisory ID:       RHSA-2021:3987-01\nProduct:           Red Hat Enterprise Linux\nAdvisory URL:      https://access.redhat.com/errata/RHSA-2021:3987\nIssue date:        2021-10-26\nCVE Names:         CVE-2019-20934 CVE-2020-36385 CVE-2021-3653 \n                   CVE-2021-3656 CVE-2021-22543 CVE-2021-37576 \n=====================================================================\n\n1. Summary:\n\nAn update for kernel is now available for Red Hat Enterprise Linux 7.7\nAdvanced Update Support, Red Hat Enterprise Linux 7.7 Telco Extended Update\nSupport, and Red Hat Enterprise Linux 7.7 Update Services for SAP\nSolutions. \n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Enterprise Linux Server AUS (v. 7.7) - noarch, x86_64\nRed Hat Enterprise Linux Server E4S (v. 7.7) - noarch, ppc64le, x86_64\nRed Hat Enterprise Linux Server Optional AUS (v. 7.7) - x86_64\nRed Hat Enterprise Linux Server Optional E4S (v. 7.6) - ppc64le, x86_64\nRed Hat Enterprise Linux Server Optional TUS (v. 7.7) - x86_64\nRed Hat Enterprise Linux Server TUS (v. 7.7) - noarch, x86_64\n\n3. Description:\n\nThe kernel packages contain the Linux kernel, the core of any Linux\noperating system. \n\nBug Fix(es):\n\n* A race between i40e_ndo_set_vf_mac() and i40e_vsi_clear() in the i40e\ndriver causes a use after free condition of the kmalloc-4096 slab cache. \n(BZ#1980333)\n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect. \n\n5. Package List:\n\nRed Hat Enterprise Linux Server AUS (v. 7.7):\n\nSource:\nkernel-3.10.0-1062.59.1.el7.src.rpm\n\nnoarch:\nkernel-abi-whitelists-3.10.0-1062.59.1.el7.noarch.rpm\nkernel-doc-3.10.0-1062.59.1.el7.noarch.rpm\n\nx86_64:\nbpftool-3.10.0-1062.59.1.el7.x86_64.rpm\nbpftool-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debug-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debug-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debug-devel-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debuginfo-common-x86_64-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-devel-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-headers-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-tools-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-tools-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-tools-libs-3.10.0-1062.59.1.el7.x86_64.rpm\nperf-3.10.0-1062.59.1.el7.x86_64.rpm\nperf-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\npython-perf-3.10.0-1062.59.1.el7.x86_64.rpm\npython-perf-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\n\nRed Hat Enterprise Linux Server E4S (v. 7.7):\n\nSource:\nkernel-3.10.0-1062.59.1.el7.src.rpm\n\nnoarch:\nkernel-abi-whitelists-3.10.0-1062.59.1.el7.noarch.rpm\nkernel-doc-3.10.0-1062.59.1.el7.noarch.rpm\n\nppc64le:\nbpftool-3.10.0-1062.59.1.el7.ppc64le.rpm\nbpftool-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm\nkernel-3.10.0-1062.59.1.el7.ppc64le.rpm\nkernel-bootwrapper-3.10.0-1062.59.1.el7.ppc64le.rpm\nkernel-debug-3.10.0-1062.59.1.el7.ppc64le.rpm\nkernel-debug-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm\nkernel-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm\nkernel-debuginfo-common-ppc64le-3.10.0-1062.59.1.el7.ppc64le.rpm\nkernel-devel-3.10.0-1062.59.1.el7.ppc64le.rpm\nkernel-headers-3.10.0-1062.59.1.el7.ppc64le.rpm\nkernel-tools-3.10.0-1062.59.1.el7.ppc64le.rpm\nkernel-tools-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm\nkernel-tools-libs-3.10.0-1062.59.1.el7.ppc64le.rpm\nperf-3.10.0-1062.59.1.el7.ppc64le.rpm\nperf-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm\npython-perf-3.10.0-1062.59.1.el7.ppc64le.rpm\npython-perf-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm\n\nx86_64:\nbpftool-3.10.0-1062.59.1.el7.x86_64.rpm\nbpftool-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debug-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debug-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debug-devel-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debuginfo-common-x86_64-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-devel-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-headers-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-tools-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-tools-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-tools-libs-3.10.0-1062.59.1.el7.x86_64.rpm\nperf-3.10.0-1062.59.1.el7.x86_64.rpm\nperf-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\npython-perf-3.10.0-1062.59.1.el7.x86_64.rpm\npython-perf-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\n\nRed Hat Enterprise Linux Server TUS (v. 7.7):\n\nSource:\nkernel-3.10.0-1062.59.1.el7.src.rpm\n\nnoarch:\nkernel-abi-whitelists-3.10.0-1062.59.1.el7.noarch.rpm\nkernel-doc-3.10.0-1062.59.1.el7.noarch.rpm\n\nx86_64:\nbpftool-3.10.0-1062.59.1.el7.x86_64.rpm\nbpftool-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debug-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debug-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debug-devel-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debuginfo-common-x86_64-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-devel-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-headers-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-tools-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-tools-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-tools-libs-3.10.0-1062.59.1.el7.x86_64.rpm\nperf-3.10.0-1062.59.1.el7.x86_64.rpm\nperf-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\npython-perf-3.10.0-1062.59.1.el7.x86_64.rpm\npython-perf-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional AUS (v. 7.7):\n\nx86_64:\nbpftool-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debug-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debuginfo-common-x86_64-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-tools-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-tools-libs-devel-3.10.0-1062.59.1.el7.x86_64.rpm\nperf-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\npython-perf-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional E4S (v. 7.6):\n\nppc64le:\nbpftool-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm\nkernel-debug-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm\nkernel-debug-devel-3.10.0-1062.59.1.el7.ppc64le.rpm\nkernel-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm\nkernel-debuginfo-common-ppc64le-3.10.0-1062.59.1.el7.ppc64le.rpm\nkernel-tools-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm\nkernel-tools-libs-devel-3.10.0-1062.59.1.el7.ppc64le.rpm\nperf-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm\npython-perf-debuginfo-3.10.0-1062.59.1.el7.ppc64le.rpm\n\nx86_64:\nbpftool-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debug-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debuginfo-common-x86_64-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-tools-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-tools-libs-devel-3.10.0-1062.59.1.el7.x86_64.rpm\nperf-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\npython-perf-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional TUS (v. 7.7):\n\nx86_64:\nbpftool-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debug-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-debuginfo-common-x86_64-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-tools-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\nkernel-tools-libs-devel-3.10.0-1062.59.1.el7.x86_64.rpm\nperf-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\npython-perf-debuginfo-3.10.0-1062.59.1.el7.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security.  Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2019-20934\nhttps://access.redhat.com/security/cve/CVE-2020-36385\nhttps://access.redhat.com/security/cve/CVE-2021-3653\nhttps://access.redhat.com/security/cve/CVE-2021-3656\nhttps://access.redhat.com/security/cve/CVE-2021-22543\nhttps://access.redhat.com/security/cve/CVE-2021-37576\nhttps://access.redhat.com/security/updates/classification/#important\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2021 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n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\nG9cg8fFnilE=\n=hTrt\n-----END PGP SIGNATURE-----\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://listman.redhat.com/mailman/listinfo/rhsa-announce\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2021-22543"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-007425"
      },
      {
        "db": "VULHUB",
        "id": "VHN-380980"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-22543"
      },
      {
        "db": "PACKETSTORM",
        "id": "164565"
      },
      {
        "db": "PACKETSTORM",
        "id": "163926"
      },
      {
        "db": "PACKETSTORM",
        "id": "163770"
      },
      {
        "db": "PACKETSTORM",
        "id": "164469"
      },
      {
        "db": "PACKETSTORM",
        "id": "163995"
      },
      {
        "db": "PACKETSTORM",
        "id": "164237"
      },
      {
        "db": "PACKETSTORM",
        "id": "164666"
      },
      {
        "db": "PACKETSTORM",
        "id": "164652"
      }
    ],
    "trust": 2.52
  },
  "external_ids": {
    "_id": null,
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2021-22543",
        "trust": 4.2
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2021/06/26/1",
        "trust": 1.8
      },
      {
        "db": "PACKETSTORM",
        "id": "164666",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-007425",
        "trust": 0.8
      },
      {
        "db": "PACKETSTORM",
        "id": "164589",
        "trust": 0.7
      },
      {
        "db": "PACKETSTORM",
        "id": "167858",
        "trust": 0.7
      },
      {
        "db": "PACKETSTORM",
        "id": "164583",
        "trust": 0.7
      },
      {
        "db": "PACKETSTORM",
        "id": "163995",
        "trust": 0.7
      },
      {
        "db": "PACKETSTORM",
        "id": "164237",
        "trust": 0.7
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2021/05/26/3",
        "trust": 0.6
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2021/05/26/4",
        "trust": 0.6
      },
      {
        "db": "OPENWALL",
        "id": "OSS-SECURITY/2021/05/26/5",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3485",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3324",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3034",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2022.3626",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.2959",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3372",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.2764",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3536",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3173",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3554",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.4163",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3249",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3389",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3015",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.2899",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.4156",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.2691",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3137",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.4282",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3456",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.4089",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3499",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.2789",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "164331",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "163865",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "164098",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "164562",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "164076",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "164223",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "164431",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "164186",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "164028",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "164484",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "163767",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "164477",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2021082206",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2021083123",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2021111726",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2022072069",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2021102111",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2021090126",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2021101336",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2022020931",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2021100618",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202105-1684",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "164652",
        "trust": 0.2
      },
      {
        "db": "VULHUB",
        "id": "VHN-380980",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-22543",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "164565",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "163926",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "163770",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "164469",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-380980"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-22543"
      },
      {
        "db": "PACKETSTORM",
        "id": "164565"
      },
      {
        "db": "PACKETSTORM",
        "id": "163926"
      },
      {
        "db": "PACKETSTORM",
        "id": "163770"
      },
      {
        "db": "PACKETSTORM",
        "id": "164469"
      },
      {
        "db": "PACKETSTORM",
        "id": "163995"
      },
      {
        "db": "PACKETSTORM",
        "id": "164237"
      },
      {
        "db": "PACKETSTORM",
        "id": "164666"
      },
      {
        "db": "PACKETSTORM",
        "id": "164652"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202105-1684"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-007425"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-22543"
      }
    ]
  },
  "id": "VAR-202105-1451",
  "iot": {
    "_id": null,
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-380980"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2026-04-10T23:33:59.314000Z",
  "patch": {
    "_id": null,
    "data": [
      {
        "title": "Linux\u00a0Kernel\u00a0Archives NetAppNetApp\u00a0Advisory",
        "trust": 0.8,
        "url": "https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html"
      },
      {
        "title": "Red Hat: Important: kernel security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20225640 - Security Advisory"
      },
      {
        "title": "Red Hat: CVE-2021-22543",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database\u0026qid=CVE-2021-22543"
      },
      {
        "title": "Amazon Linux 2: ALAS2-2021-1699",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux2\u0026qid=ALAS2-2021-1699"
      },
      {
        "title": "Arch Linux Issues: ",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_issues\u0026qid=CVE-2021-22543 log"
      },
      {
        "title": "Amazon Linux AMI: ALAS-2021-1539",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami\u0026qid=ALAS-2021-1539"
      },
      {
        "title": "Amazon Linux 2: ALAS2KERNEL-5.4-2022-004",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux2\u0026qid=ALAS2KERNEL-5.4-2022-004"
      },
      {
        "title": "Amazon Linux 2: ALAS2KERNEL-5.10-2022-002",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux2\u0026qid=ALAS2KERNEL-5.10-2022-002"
      },
      {
        "title": "CVE-2021-22543",
        "trust": 0.1,
        "url": "https://github.com/JamesGeeee/CVE-2021-22543 "
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2021-22543"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-007425"
      }
    ]
  },
  "problemtype_data": {
    "_id": null,
    "data": [
      {
        "problemtype": "CWE-119",
        "trust": 1.1
      },
      {
        "problemtype": "Buffer error (CWE-119) [NVD Evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-380980"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-007425"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-22543"
      }
    ]
  },
  "references": {
    "_id": null,
    "data": [
      {
        "trust": 2.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-22543"
      },
      {
        "trust": 1.8,
        "url": "https://security.netapp.com/advisory/ntap-20210708-0002/"
      },
      {
        "trust": 1.8,
        "url": "https://github.com/google/security-research/security/advisories/ghsa-7wq5-phmq-m584"
      },
      {
        "trust": 1.8,
        "url": "https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html"
      },
      {
        "trust": 1.8,
        "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html"
      },
      {
        "trust": 1.8,
        "url": "http://www.openwall.com/lists/oss-security/2021/06/26/1"
      },
      {
        "trust": 1.4,
        "url": "https://access.redhat.com/security/cve/cve-2021-22543"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4g5ybuvephzyxmkngbz3s6infcteel4e/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/roqixqb7zawi3ksgshr6h5rduwzi775s/"
      },
      {
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/roqixqb7zawi3ksgshr6h5rduwzi775s/"
      },
      {
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4g5ybuvephzyxmkngbz3s6infcteel4e/"
      },
      {
        "trust": 0.7,
        "url": "https://listman.redhat.com/mailman/listinfo/rhsa-announce"
      },
      {
        "trust": 0.7,
        "url": "https://access.redhat.com/security/team/key/"
      },
      {
        "trust": 0.7,
        "url": "https://bugzilla.redhat.com/):"
      },
      {
        "trust": 0.7,
        "url": "https://access.redhat.com/security/team/contact/"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "trust": 0.6,
        "url": "http://www.openwall.com/lists/oss-security/2021/05/26/5"
      },
      {
        "trust": 0.6,
        "url": "http://www.openwall.com/lists/oss-security/2021/05/26/3"
      },
      {
        "trust": 0.6,
        "url": "http://www.openwall.com/lists/oss-security/2021/05/26/4"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.2899"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3034"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2021090126"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.4089"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3554"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.4282"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.4163"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2021083123"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/164431/ubuntu-security-notice-usn-5106-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.2789"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2021111726"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/164484/red-hat-security-advisory-2021-3802-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3485"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/164098/ubuntu-security-notice-usn-5070-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/164186/ubuntu-security-notice-usn-5071-2.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3324"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/164589/ubuntu-security-notice-usn-5120-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/164562/red-hat-security-advisory-2021-3925-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/167858/red-hat-security-advisory-2022-5640-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/164331/ubuntu-security-notice-usn-5094-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2021082206"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2022020931"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3249"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.2959"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/164666/red-hat-security-advisory-2021-4000-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/164028/red-hat-security-advisory-2021-3262-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.2764"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3137"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3456"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3015"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3499"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3372"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3173"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/163995/red-hat-security-advisory-2021-3363-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2021101336"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/164223/red-hat-security-advisory-2021-3598-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2022072069"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/163767/red-hat-security-advisory-2021-3044-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2022.3626"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/164583/red-hat-security-advisory-2021-3949-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3536"
      },
      {
        "trust": 0.6,
        "url": "https://vigilance.fr/vulnerability/linux-kernel-memory-corruption-via-dev-kvm-35543"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/164076/red-hat-security-advisory-2021-3454-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/164477/red-hat-security-advisory-2021-3814-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.2691"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/164237/ubuntu-security-notice-usn-5071-3.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3389"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.4156"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2021100618"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2021102111"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/163865/red-hat-security-advisory-2021-3173-01.html"
      },
      {
        "trust": 0.5,
        "url": "https://access.redhat.com/articles/11258"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2021-3609"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-22555"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2021-22555"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-3609"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-37576"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2021-37576"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/articles/2974891"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/119.html"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:5640"
      },
      {
        "trust": 0.1,
        "url": "https://github.com/jamesgeeee/cve-2021-22543"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2021:3943"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2021:3235"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-3621"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-3621"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2021:3088"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2021:3766"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-32399"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-32399"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2021:3363"
      },
      {
        "trust": 0.1,
        "url": "https://ubuntu.com/security/notices/usn-5071-1"
      },
      {
        "trust": 0.1,
        "url": "https://ubuntu.com/security/notices/usn-5071-3"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-3612"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-raspi-5.4/5.4.0-1043.47~18.04.1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-raspi/5.4.0-1043.47"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2021:4000"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-20934"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-3653"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-3656"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-36385"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2021:3987"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-36385"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-3656"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-3653"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-20934"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-380980"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-22543"
      },
      {
        "db": "PACKETSTORM",
        "id": "164565"
      },
      {
        "db": "PACKETSTORM",
        "id": "163926"
      },
      {
        "db": "PACKETSTORM",
        "id": "163770"
      },
      {
        "db": "PACKETSTORM",
        "id": "164469"
      },
      {
        "db": "PACKETSTORM",
        "id": "163995"
      },
      {
        "db": "PACKETSTORM",
        "id": "164237"
      },
      {
        "db": "PACKETSTORM",
        "id": "164666"
      },
      {
        "db": "PACKETSTORM",
        "id": "164652"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202105-1684"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-007425"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-22543"
      }
    ]
  },
  "sources": {
    "_id": null,
    "data": [
      {
        "db": "VULHUB",
        "id": "VHN-380980",
        "ident": null
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-22543",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "164565",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "163926",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "163770",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "164469",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "163995",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "164237",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "164666",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "164652",
        "ident": null
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202105-1684",
        "ident": null
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-007425",
        "ident": null
      },
      {
        "db": "NVD",
        "id": "CVE-2021-22543",
        "ident": null
      }
    ]
  },
  "sources_release_date": {
    "_id": null,
    "data": [
      {
        "date": "2021-05-26T00:00:00",
        "db": "VULHUB",
        "id": "VHN-380980",
        "ident": null
      },
      {
        "date": "2021-05-26T00:00:00",
        "db": "VULMON",
        "id": "CVE-2021-22543",
        "ident": null
      },
      {
        "date": "2021-10-20T15:47:57",
        "db": "PACKETSTORM",
        "id": "164565",
        "ident": null
      },
      {
        "date": "2021-08-28T13:22:22",
        "db": "PACKETSTORM",
        "id": "163926",
        "ident": null
      },
      {
        "date": "2021-08-10T14:49:29",
        "db": "PACKETSTORM",
        "id": "163770",
        "ident": null
      },
      {
        "date": "2021-10-12T15:33:21",
        "db": "PACKETSTORM",
        "id": "164469",
        "ident": null
      },
      {
        "date": "2021-08-31T16:27:27",
        "db": "PACKETSTORM",
        "id": "163995",
        "ident": null
      },
      {
        "date": "2021-09-22T16:24:38",
        "db": "PACKETSTORM",
        "id": "164237",
        "ident": null
      },
      {
        "date": "2021-10-26T19:34:32",
        "db": "PACKETSTORM",
        "id": "164666",
        "ident": null
      },
      {
        "date": "2021-10-26T15:31:16",
        "db": "PACKETSTORM",
        "id": "164652",
        "ident": null
      },
      {
        "date": "2021-05-26T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202105-1684",
        "ident": null
      },
      {
        "date": "2022-02-10T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2021-007425",
        "ident": null
      },
      {
        "date": "2021-05-26T11:15:08.623000",
        "db": "NVD",
        "id": "CVE-2021-22543",
        "ident": null
      }
    ]
  },
  "sources_update_date": {
    "_id": null,
    "data": [
      {
        "date": "2022-04-01T00:00:00",
        "db": "VULHUB",
        "id": "VHN-380980",
        "ident": null
      },
      {
        "date": "2022-04-01T00:00:00",
        "db": "VULMON",
        "id": "CVE-2021-22543",
        "ident": null
      },
      {
        "date": "2022-07-28T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202105-1684",
        "ident": null
      },
      {
        "date": "2022-02-10T08:59:00",
        "db": "JVNDB",
        "id": "JVNDB-2021-007425",
        "ident": null
      },
      {
        "date": "2024-05-29T20:15:09.870000",
        "db": "NVD",
        "id": "CVE-2021-22543",
        "ident": null
      }
    ]
  },
  "threat_type": {
    "_id": null,
    "data": "local",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "164237"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202105-1684"
      }
    ],
    "trust": 0.7
  },
  "title": {
    "_id": null,
    "data": "Linux\u00a0Kernel\u00a0 Buffer Error Vulnerability",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-007425"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "_id": null,
    "data": "buffer error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202105-1684"
      }
    ],
    "trust": 0.6
  }
}

CVE-2021-22543 (GCVE-0-2021-22543)

Vulnerability from cvelistv5 – Published: 2021-05-26 10:30 – Updated: 2024-09-16 23:26

Title

Improper memory handling in Linux KVM

Summary

Severity ?

8.7 (High)


                        
                          CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L

CWE

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

Google

References

URL

	Vendor	Product	Version
	Linux Kernel	Linux Kernel	Affected: add6a0cd1c5ba51b201e1361b05a5df817083618 , < f8be156be163a052a067306417cd0ff679068c97 (git)

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

VAR-202105-1451

linux-raspi, linux-raspi-5.4 vulnerabilities

CVE-2021-22543 (GCVE-0-2021-22543)

Tags

Sightings

Nomenclature