CVE-2021-46967
published 2024-02-27CVE-2021-46967: In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping The virtqueue doorbell is usually…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.23%
13.9th percentile
In the Linux kernel, the following vulnerability has been resolved:
vhost-vdpa: fix vm_flags for virtqueue doorbell mapping
The virtqueue doorbell is usually implemented via registeres but we
don't provide the necessary vma->flags like VM_PFNMAP. This may cause
several issues e.g when userspace tries to map the doorbell via vhost
IOTLB, kernel may panic due to the page is not backed by page
structure. This patch fixes this by setting the necessary
vm_flags. With this patch, try to map doorbell via IOTLB will fail
with bad address.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.10.38-1 (bookworm) | linux 5.10.38-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= ddd89d0a059d8e9740c75a97e0efe9bf07ee51f9 < 3b8b6399666a29daa30b0bb3f5c9e3fc81c5a6a6 | 3b8b6399666a29daa30b0bb3f5c9e3fc81c5a6a6 |
| linux | linux | >= ddd89d0a059d8e9740c75a97e0efe9bf07ee51f9 < 940230a5c31e2714722aee04c521a21f484b4df7 | 940230a5c31e2714722aee04c521a21f484b4df7 |
| linux | linux | >= ddd89d0a059d8e9740c75a97e0efe9bf07ee51f9 < 93dbbf20e3ffad14f04227a0b7105f6e6f0387ce | 93dbbf20e3ffad14f04227a0b7105f6e6f0387ce |
| linux | linux | >= ddd89d0a059d8e9740c75a97e0efe9bf07ee51f9 < 3a3e0fad16d40a2aa68ddf7eea4acdf48b22dd44 | 3a3e0fad16d40a2aa68ddf7eea4acdf48b22dd44 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 5.11 < 5.11.20 | 5.11.20 |
| linux | linux_kernel | >= 5.12 < 5.12.3 | 5.12.3 |
| linux | linux_kernel | >= 5.8 < 5.10.36 | 5.10.36 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2prc-4f47-p38v: In the Linux kernel, the following vulnerability has been resolved:
vhost-vdpa: fix vm_flags for virtqueue doorbell mapping
The virtqueue doorbell i
ghsa_unreviewed·2024-02-27
CVE-2021-46967 [MEDIUM] GHSA-2prc-4f47-p38v: In the Linux kernel, the following vulnerability has been resolved:
vhost-vdpa: fix vm_flags for virtqueue doorbell mapping
The virtqueue doorbell i
In the Linux kernel, the following vulnerability has been resolved:
vhost-vdpa: fix vm_flags for virtqueue doorbell mapping
The virtqueue doorbell is usually implemented via registeres but we
don't provide the necessary vma->flags like VM_PFNMAP. This may cause
several issues e.g when userspace tries to map the doorbell via vhost
IOTLB, kernel may panic due to the page is not backed by page
structure. This patch fixes this by setting the necessary
vm_flags. With this patch, try to map doorbell via IOTLB will fail
with bad address.
OSV
CVE-2021-46967: In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping The virtqueue doorbell is
osv·2024-02-27·CVSS 5.5
CVE-2021-46967 [MEDIUM] CVE-2021-46967: In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping The virtqueue doorbell is
In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping The virtqueue doorbell is usually implemented via registeres but we don't provide the necessary vma->flags like VM_PFNMAP. This may cause several issues e.g when userspace tries to map the doorbell via vhost IOTLB, kernel may panic due to the page is not backed by page structure. This patch fixes this by setting the necessary vm_flags. With this patch, try to map doorbell via IOTLB will fail with bad address.
Red Hat
kernel: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping
vendor_redhat·2024-02-27·CVSS 5.5
CVE-2021-46967 [MEDIUM] CWE-230 kernel: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping
kernel: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping
In the Linux kernel, the following vulnerability has been resolved:
vhost-vdpa: fix vm_flags for virtqueue doorbell mapping
The virtqueue doorbell is usually implemented via registeres but we
don't provide the necessary vma->flags like VM_PFNMAP. This may cause
several issues e.g when userspace tries to map the doorbell via vhost
IOTLB, kernel may panic due to the page is not backed by page
structure. This patch fixes this by setting the necessary
vm_flags. With this patch, try to map doorbell via IOTLB will fail
with bad address.
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 7) - Out of su
Debian
CVE-2021-46967: linux - In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa:...
vendor_debian·2021·CVSS 5.5
CVE-2021-46967 [MEDIUM] CVE-2021-46967: linux - In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa:...
In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping The virtqueue doorbell is usually implemented via registeres but we don't provide the necessary vma->flags like VM_PFNMAP. This may cause several issues e.g when userspace tries to map the doorbell via vhost IOTLB, kernel may panic due to the page is not backed by page structure. This patch fixes this by setting the necessary vm_flags. With this patch, try to map doorbell via IOTLB will fail with bad address.
Scope: local
bookworm: resolved (fixed in 5.10.38-1)
bullseye: resolved (fixed in 5.10.38-1)
forky: resolved (fixed in 5.10.38-1)
sid: resolved (fixed in 5.10.38-1)
trixie: resolved (fixed in 5.10.38-1)
Suricata
ET EXPLOIT Zimbra <8.8.11 - XML External Entity Injection/SSRF Attempt (CVE-2019-9621)
suricata·2021-01-27·CVSS 7.5
CVE-2019-9621 [HIGH] ET EXPLOIT Zimbra <8.8.11 - XML External Entity Injection/SSRF Attempt (CVE-2019-9621)
ET EXPLOIT Zimbra $HOME_NET any (msg:"ET EXPLOIT Zimbra "; content:""; reference:url,www.exploit-db.com/exploits/46967; reference:url,packetstormsecurity.com/files/152487/Zimbra-Collaboration-Autodiscover-Servlet-XXE-ProxyServlet-SSRF.html; reference:cve,2019-9621; reference:cve,2021-2109; classtype:attempted-user; sid:2031562; rev:1; metadata:affected_product Web_Server_Applications, attack_target Client_Endpoint, created_at 2021_01_27, cve CVE_2021_2109, deployment Perimeter, confidence Medium, signature_severity Major, updated_at 2021_01_27;)
No public exploits indexed.
https://git.kernel.org/stable/c/3a3e0fad16d40a2aa68ddf7eea4acdf48b22dd44https://git.kernel.org/stable/c/3b8b6399666a29daa30b0bb3f5c9e3fc81c5a6a6https://git.kernel.org/stable/c/93dbbf20e3ffad14f04227a0b7105f6e6f0387cehttps://git.kernel.org/stable/c/940230a5c31e2714722aee04c521a21f484b4df7https://git.kernel.org/stable/c/3a3e0fad16d40a2aa68ddf7eea4acdf48b22dd44https://git.kernel.org/stable/c/3b8b6399666a29daa30b0bb3f5c9e3fc81c5a6a6https://git.kernel.org/stable/c/93dbbf20e3ffad14f04227a0b7105f6e6f0387cehttps://git.kernel.org/stable/c/940230a5c31e2714722aee04c521a21f484b4df7
2024-02-27
Published