CVE-2021-47112

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2021-47112", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-03-04T18:12:48.836Z", "datePublished": "2024-03-15T20:14:20.602Z", "dateUpdated": "2026-08-05T08:46:05.685Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T08:46:05.685Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kvm: Teardown PV features on boot CPU as well\n\nVarious PV features (Async PF, PV EOI, steal time) work through memory\nshared with hypervisor and when we restore from hibernation we must\nproperly teardown all these features to make sure hypervisor doesn't\nwrite to stale locations after we jump to the previously hibernated kernel\n(which can try to place anything there). For secondary CPUs the job is\nalready done by kvm_cpu_down_prepare(), register syscore ops to do\nthe same for boot CPU."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - The bug is in guest-side KVM paravirt code (arch/x86/kernel/kvm.c) and is reached only when the guest performs local hibernation/suspend-to-disk (write to /sys/power/state or logind), not via network packets or adjacent-link protocols.\nAC:L - On a KVM guest with PV features (steal time/PV EOI/async PF), initiating hibernate/resume cycles deterministically leaves boot-CPU PV MSRs enabled so the hypervisor keeps writing shared structures; Ubuntu reproduced reliable memory corruption after repeated hibernate/resume with no attacker-uncontrollable race.\nPR:L - An active local seat user can trigger hibernate/suspend through logind/polkit without real init-namespace root, matching the worst reasonable desktop/laptop KVM-guest deployment; this does not require capabilities obtainable only outside user namespaces.\nUI:N - The attacker initiates hibernation/resume themselves (or the same path is entered by session autosleep); no separate victim action such as mounting a filesystem or opening a crafted file is required.\nS:U - Impact is memory corruption inside the guest kernel from incomplete PV teardown; this is not a guest-to-host escape, IOMMU bypass, or other cross-authority breakout (the host already fully controls guest memory).\nC:H - Hypervisor writes into stale guest GPAs after resume corrupt arbitrary kernel pages that reused those locations (observed page-flag corruption); such kernel memory corruption can be leveraged for information disclosure.\nI:H - The same stale-GPA writes are kernel memory corruption (page metadata and whatever structures land at the still-registered GPAs), which is exploitable for integrity break / control-flow hijacking under the higher-severity memory-corruption guidance.\nA:H - The corruption manifests as BUG: Bad page state / page-allocator failures and can oops/panic or otherwise crash the guest kernel after hibernation resume, fully denying availability."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/x86/kernel/kvm.c"], "versions": [{"version": "fd10cde9294f73eeccbc16f3fec1ae6cde7b800c", "lessThan": "7620a669111b52f224d006dea9e1e688e2d62c54", "status": "affected", "versionType": "git"}, {"version": "fd10cde9294f73eeccbc16f3fec1ae6cde7b800c", "lessThan": "38b858da1c58ad46519a257764e059e663b59ff2", "status": "affected", "versionType": "git"}, {"version": "fd10cde9294f73eeccbc16f3fec1ae6cde7b800c", "lessThan": "d1629b5b925de9b27979e929dae7fcb766daf6b6", "status": "affected", "versionType": "git"}, {"version": "fd10cde9294f73eeccbc16f3fec1ae6cde7b800c", "lessThan": "8b79feffeca28c5459458fe78676b081e87c93a4", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/x86/kernel/kvm.c"], "versions": [{"version": "2.6.38", "status": "affected"}, {"version": "0", "lessThan": "2.6.38", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.125", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.43", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.12.10", "lessThanOrEqual": "5.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.13", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.38", "versionEndExcluding": "5.4.125"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.38", "versionEndExcluding": "5.10.43"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.38", "versionEndExcluding": "5.12.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.38", "versionEndExcluding": "5.13"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/7620a669111b52f224d006dea9e1e688e2d62c54"}, {"url": "https://git.kernel.org/stable/c/38b858da1c58ad46519a257764e059e663b59ff2"}, {"url": "https://git.kernel.org/stable/c/d1629b5b925de9b27979e929dae7fcb766daf6b6"}, {"url": "https://git.kernel.org/stable/c/8b79feffeca28c5459458fe78676b081e87c93a4"}], "title": "x86/kvm: Teardown PV features on boot CPU as well", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47112", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-18T20:26:26.037473Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:14:29.430Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:39.829Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/7620a669111b52f224d006dea9e1e688e2d62c54", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/38b858da1c58ad46519a257764e059e663b59ff2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d1629b5b925de9b27979e929dae7fcb766daf6b6", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8b79feffeca28c5459458fe78676b081e87c93a4", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/7620a669111b52f224d006dea9e1e688e2d62c54", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/38b858da1c58ad46519a257764e059e663b59ff2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d1629b5b925de9b27979e929dae7fcb766daf6b6", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8b79feffeca28c5459458fe78676b081e87c93a4", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:39.829Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47112", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-18T20:26:26.037473Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:18.574Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "x86/kvm: Teardown PV features on boot CPU as well", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:L - The bug is in guest-side KVM paravirt code (arch/x86/kernel/kvm.c) and is reached only when the guest performs local hibernation/suspend-to-disk (write to /sys/power/state or logind), not via network packets or adjacent-link protocols.\nAC:L - On a KVM guest with PV features (steal time/PV EOI/async PF), initiating hibernate/resume cycles deterministically leaves boot-CPU PV MSRs enabled so the hypervisor keeps writing shared structures; Ubuntu reproduced reliable memory corruption after repeated hibernate/resume with no attacker-uncontrollable race.\nPR:L - An active local seat user can trigger hibernate/suspend through logind/polkit without real init-namespace root, matching the worst reasonable desktop/laptop KVM-guest deployment; this does not require capabilities obtainable only outside user namespaces.\nUI:N - The attacker initiates hibernation/resume themselves (or the same path is entered by session autosleep); no separate victim action such as mounting a filesystem or opening a crafted file is required.\nS:U - Impact is memory corruption inside the guest kernel from incomplete PV teardown; this is not a guest-to-host escape, IOMMU bypass, or other cross-authority breakout (the host already fully controls guest memory).\nC:H - Hypervisor writes into stale guest GPAs after resume corrupt arbitrary kernel pages that reused those locations (observed page-flag corruption); such kernel memory corruption can be leveraged for information disclosure.\nI:H - The same stale-GPA writes are kernel memory corruption (page metadata and whatever structures land at the still-registered GPAs), which is exploitable for integrity break / control-flow hijacking under the higher-severity memory-corruption guidance.\nA:H - The corruption manifests as BUG: Bad page state / page-allocator failures and can oops/panic or otherwise crash the guest kernel after hibernation resume, fully denying availability."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "fd10cde9294f73eeccbc16f3fec1ae6cde7b800c", "lessThan": "7620a669111b52f224d006dea9e1e688e2d62c54", "versionType": "git"}, {"status": "affected", "version": "fd10cde9294f73eeccbc16f3fec1ae6cde7b800c", "lessThan": "38b858da1c58ad46519a257764e059e663b59ff2", "versionType": "git"}, {"status": "affected", "version": "fd10cde9294f73eeccbc16f3fec1ae6cde7b800c", "lessThan": "d1629b5b925de9b27979e929dae7fcb766daf6b6", "versionType": "git"}, {"status": "affected", "version": "fd10cde9294f73eeccbc16f3fec1ae6cde7b800c", "lessThan": "8b79feffeca28c5459458fe78676b081e87c93a4", "versionType": "git"}], "programFiles": ["arch/x86/kernel/kvm.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "2.6.38"}, {"status": "unaffected", "version": "0", "lessThan": "2.6.38", "versionType": "semver"}, {"status": "unaffected", "version": "5.4.125", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.43", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.12.10", "versionType": "semver", "lessThanOrEqual": "5.12.*"}, {"status": "unaffected", "version": "5.13", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["arch/x86/kernel/kvm.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/7620a669111b52f224d006dea9e1e688e2d62c54"}, {"url": "https://git.kernel.org/stable/c/38b858da1c58ad46519a257764e059e663b59ff2"}, {"url": "https://git.kernel.org/stable/c/d1629b5b925de9b27979e929dae7fcb766daf6b6"}, {"url": "https://git.kernel.org/stable/c/8b79feffeca28c5459458fe78676b081e87c93a4"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kvm: Teardown PV features on boot CPU as well\n\nVarious PV features (Async PF, PV EOI, steal time) work through memory\nshared with hypervisor and when we restore from hibernation we must\nproperly teardown all these features to make sure hypervisor doesn't\nwrite to stale locations after we jump to the previously hibernated kernel\n(which can try to place anything there). For secondary CPUs the job is\nalready done by kvm_cpu_down_prepare(), register syscore ops to do\nthe same for boot CPU."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.4.125", "versionStartIncluding": "2.6.38"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.43", "versionStartIncluding": "2.6.38"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.12.10", "versionStartIncluding": "2.6.38"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.13", "versionStartIncluding": "2.6.38"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T08:46:05.685Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47112", "state": "PUBLISHED", "dateUpdated": "2026-08-05T08:46:05.685Z", "dateReserved": "2024-03-04T18:12:48.836Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-03-15T20:14:20.602Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["arch/x86/kernel/kvm.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "7620a669111b52f224d006dea9e1e688e2d62c54", "status": "affected", "version": "fd10cde9294f73eeccbc16f3fec1ae6cde7b800c", "versionType": "git"}, {"lessThan": "38b858da1c58ad46519a257764e059e663b59ff2", "status": "affected", "version": "fd10cde9294f73eeccbc16f3fec1ae6cde7b800c", "versionType": "git"}, {"lessThan": "d1629b5b925de9b27979e929dae7fcb766daf6b6", "status": "affected", "version": "fd10cde9294f73eeccbc16f3fec1ae6cde7b800c", "versionType": "git"}, {"lessThan": "8b79feffeca28c5459458fe78676b081e87c93a4", "status": "affected", "version": "fd10cde9294f73eeccbc16f3fec1ae6cde7b800c", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["arch/x86/kernel/kvm.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "2.6.38"}, {"lessThan": "2.6.38", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.4.*", "status": "unaffected", "version": "5.4.125", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.43", "versionType": "semver"}, {"lessThanOrEqual": "5.12.*", "status": "unaffected", "version": "5.12.10", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "5.13", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "F463D47B-F1A3-457B-87D0-92D3B3A033B0", "versionEndExcluding": "5.4.125", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "B2136BD5-4F86-40C8-96C8-5C90A015490C", "versionEndExcluding": "5.10.43", "versionStartIncluding": "5.5", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "27384800-AB48-4C08-891E-34B66F5FC4AA", "versionEndExcluding": "5.12.10", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*", "matchCriteriaId": "0CBAD0FC-C281-4666-AB2F-F8E6E1165DF7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kvm: Teardown PV features on boot CPU as well\n\nVarious PV features (Async PF, PV EOI, steal time) work through memory\nshared with hypervisor and when we restore from hibernation we must\nproperly teardown all these features to make sure hypervisor doesn't\nwrite to stale locations after we jump to the previously hibernated kernel\n(which can try to place anything there). For secondary CPUs the job is\nalready done by kvm_cpu_down_prepare(), register syscore ops to do\nthe same for boot CPU."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: x86/kvm: Desmontaje de funciones PV tambi\u00e9n en la CPU de arranque Varias funciones PV (Async PF, PV EOI, tiempo de robo) funcionan a trav\u00e9s de la memoria compartida con el hipervisor y cuando restauramos desde la hibernaci\u00f3n Debemos eliminar adecuadamente todas estas caracter\u00edsticas para asegurarnos de que el hipervisor no escriba en ubicaciones obsoletas despu\u00e9s de saltar al kernel previamente hibernado (que puede intentar colocar cualquier cosa all\u00ed). Para las CPU secundarias, el trabajo ya lo realiza kvm_cpu_down_prepare(), registre syscore ops para hacer lo mismo para la CPU de arranque."}], "id": "CVE-2021-47112", "lastModified": "2026-08-04T10:16:46.597", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2021-47112", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-03-18T20:26:26.037473Z", "version": "2.0.3"}}]}, "published": "2024-03-15T21:15:06.627", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/38b858da1c58ad46519a257764e059e663b59ff2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/7620a669111b52f224d006dea9e1e688e2d62c54"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/8b79feffeca28c5459458fe78676b081e87c93a4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d1629b5b925de9b27979e929dae7fcb766daf6b6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/38b858da1c58ad46519a257764e059e663b59ff2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/7620a669111b52f224d006dea9e1e688e2d62c54"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/8b79feffeca28c5459458fe78676b081e87c93a4"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d1629b5b925de9b27979e929dae7fcb766daf6b6"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: x86/kvm: Teardown PV features on boot CPU as well", "id": "2269869", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2269869"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-459", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nx86/kvm: Teardown PV features on boot CPU as well\nVarious PV features (Async PF, PV EOI, steal time) work through memory\nshared with hypervisor and when we restore from hibernation we must\nproperly teardown all these features to make sure hypervisor doesn't\nwrite to stale locations after we jump to the previously hibernated kernel\n(which can try to place anything there). For secondary CPUs the job is\nalready done by kvm_cpu_down_prepare(), register syscore ops to do\nthe same for boot CPU."], "name": "CVE-2021-47112", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-03-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-47112\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-47112\nhttps://lore.kernel.org/linux-cve-announce/2024031507-CVE-2021-47112-339c@gregkh/T/#u"], "threat_severity": "Low"}

{}