CVE-2021-37576 — Out-of-bounds Write in Kernel

CWE-787 — Out-of-bounds WriteCWE-1284 — Improper Validation of Specified Quantity in Input18 documents8 sources
Severity
7.8HIGHNVD
OSV8.7OSV4.7
EPSS
0.0%
top 96.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Linux KernelDebian LinuxFedoraproject Fedora+3 more
Timeline
PublishedJul 26
Latest updateFeb 14

Description

arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages7 packages

▶NVDlinux/linux_kernel3.10 — 4.4.277+6
▶Debianlinux/linux_kernel< 5.10.46-5+3
▶Ubuntulinux/linux_kernel< 4.15.0-159.167+1
▶debiandebian/linux< linux 5.14.6-1 (bookworm)

Also affects: Fedora 33, 34

Patches

Patch: www.openwall.com ↗Patch: git.kernel.org ↗Patch: www.openwall.com ↗

🔴Vulnerability Details

8
GHSA
GHSA-w5r9-h86g-qp9x: arch/powerpc/kvm/book3s_rtas↗2022-05-24
▶
OSV
linux-azure, linux-azure-5.11 regression↗2021-10-18
▶
OSV
linux-azure, linux-azure-5.4 regression↗2021-10-15
▶
OSV
linux-hwe-5.11, linux-azure, linux-azure-5.11, linux-oracle-5.11 vulnerabilities↗2021-09-29
▶
OSV
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-snapdragon vulnerabilities↗2021-09-29
▶

📋Vendor Advisories

9
Palo Alto
PAN-SA-2024-0001 Informational Bulletin: Impact of OSS CVEs in PAN-OS↗2024-02-14
▶
Ubuntu
Linux kernel (Azure) regression↗2021-10-18
▶
Ubuntu
Linux kernel (Azure) regression↗2021-10-15
▶
Ubuntu
Linux kernel vulnerabilities↗2021-09-29
▶
Ubuntu
Linux kernel vulnerabilities↗2021-09-29
▶
CVE-2021-37576 — Out-of-bounds Write in Linux Kernel | cvebase