CVE-2021-47112
published 2024-03-15CVE-2021-47112: In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Teardown PV features on boot CPU as well Various PV features (Async PF, PV EOI…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.25%
16.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
x86/kvm: Teardown PV features on boot CPU as well
Various PV features (Async PF, PV EOI, steal time) work through memory
shared with hypervisor and when we restore from hibernation we must
properly teardown all these features to make sure hypervisor doesn't
write to stale locations after we jump to the previously hibernated kernel
(which can try to place anything there). For secondary CPUs the job is
already done by kvm_cpu_down_prepare(), register syscore ops to do
the same for boot CPU.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.10.46-1 (bookworm) | linux 5.10.46-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= fd10cde9294f73eeccbc16f3fec1ae6cde7b800c < 7620a669111b52f224d006dea9e1e688e2d62c54 | 7620a669111b52f224d006dea9e1e688e2d62c54 |
| linux | linux | >= fd10cde9294f73eeccbc16f3fec1ae6cde7b800c < 38b858da1c58ad46519a257764e059e663b59ff2 | 38b858da1c58ad46519a257764e059e663b59ff2 |
| linux | linux | >= fd10cde9294f73eeccbc16f3fec1ae6cde7b800c < d1629b5b925de9b27979e929dae7fcb766daf6b6 | d1629b5b925de9b27979e929dae7fcb766daf6b6 |
| linux | linux | >= fd10cde9294f73eeccbc16f3fec1ae6cde7b800c < 8b79feffeca28c5459458fe78676b081e87c93a4 | 8b79feffeca28c5459458fe78676b081e87c93a4 |
| linux | linux_kernel | < 5.4.125 | 5.4.125 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 5.11 < 5.12.10 | 5.12.10 |
| linux | linux_kernel | >= 5.5 < 5.10.43 | 5.10.43 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 5.4.124/5.10.42/5.12.9 kvm kvm_cpu_down_prepare privilege escalation
vuldb·2026-08-04·CVSS 5.5
CVE-2021-47112 [MEDIUM] Linux Kernel up to 5.4.124/5.10.42/5.12.9 kvm kvm_cpu_down_prepare privilege escalation
A vulnerability has been found in Linux Kernel up to 5.4.124/5.10.42/5.12.9 and classified as problematic. Affected by this vulnerability is the function kvm_cpu_down_prepare of the component kvm. The manipulation leads to privilege escalation.
This vulnerability is referenced as CVE-2021-47112. The attack needs to be initiated within the local network. No exploit is available.
The affected component should be upgraded.
GHSA
GHSA-fq4q-x842-fmrh: In the Linux kernel, the following vulnerability has been resolved:
x86/kvm: Teardown PV features on boot CPU as well
Various PV features (Async PF,
ghsa_unreviewed·2024-03-15
CVE-2021-47112 [MEDIUM] GHSA-fq4q-x842-fmrh: In the Linux kernel, the following vulnerability has been resolved:
x86/kvm: Teardown PV features on boot CPU as well
Various PV features (Async PF,
In the Linux kernel, the following vulnerability has been resolved:
x86/kvm: Teardown PV features on boot CPU as well
Various PV features (Async PF, PV EOI, steal time) work through memory
shared with hypervisor and when we restore from hibernation we must
properly teardown all these features to make sure hypervisor doesn't
write to stale locations after we jump to the previously hibernated kernel
(which can try to place anything there). For secondary CPUs the job is
already done by kvm_cpu_down_prepare(), register syscore ops to do
the same for boot CPU.
OSV
CVE-2021-47112: In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Teardown PV features on boot CPU as well Various PV features (Async PF, P
osv·2024-03-15·CVSS 5.5
CVE-2021-47112 [MEDIUM] CVE-2021-47112: In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Teardown PV features on boot CPU as well Various PV features (Async PF, P
In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Teardown PV features on boot CPU as well Various PV features (Async PF, PV EOI, steal time) work through memory shared with hypervisor and when we restore from hibernation we must properly teardown all these features to make sure hypervisor doesn't write to stale locations after we jump to the previously hibernated kernel (which can try to place anything there). For secondary CPUs the job is already done by kvm_cpu_down_prepare(), register syscore ops to do the same for boot CPU.
Red Hat
kernel: x86/kvm: Teardown PV features on boot CPU as well
vendor_redhat·2024-03-15·CVSS 5.5
CVE-2021-47112 [MEDIUM] CWE-459 kernel: x86/kvm: Teardown PV features on boot CPU as well
kernel: x86/kvm: Teardown PV features on boot CPU as well
In the Linux kernel, the following vulnerability has been resolved:
x86/kvm: Teardown PV features on boot CPU as well
Various PV features (Async PF, PV EOI, steal time) work through memory
shared with hypervisor and when we restore from hibernation we must
properly teardown all these features to make sure hypervisor doesn't
write to stale locations after we jump to the previously hibernated kernel
(which can try to place anything there). For secondary CPUs the job is
already done by kvm_cpu_down_prepare(), register syscore ops to do
the same for boot CPU.
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise L
Debian
CVE-2021-47112: linux - In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Te...
vendor_debian·2021·CVSS 5.5
CVE-2021-47112 [MEDIUM] CVE-2021-47112: linux - In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Te...
In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Teardown PV features on boot CPU as well Various PV features (Async PF, PV EOI, steal time) work through memory shared with hypervisor and when we restore from hibernation we must properly teardown all these features to make sure hypervisor doesn't write to stale locations after we jump to the previously hibernated kernel (which can try to place anything there). For secondary CPUs the job is already done by kvm_cpu_down_prepare(), register syscore ops to do the same for boot CPU.
Scope: local
bookworm: resolved (fixed in 5.10.46-1)
bullseye: resolved (fixed in 5.10.46-1)
forky: resolved (fixed in 5.10.46-1)
sid: resolved (fixed in 5.10.46-1)
trixie: resolved (fixed in 5.10.46-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/38b858da1c58ad46519a257764e059e663b59ff2https://git.kernel.org/stable/c/7620a669111b52f224d006dea9e1e688e2d62c54https://git.kernel.org/stable/c/8b79feffeca28c5459458fe78676b081e87c93a4https://git.kernel.org/stable/c/d1629b5b925de9b27979e929dae7fcb766daf6b6https://git.kernel.org/stable/c/38b858da1c58ad46519a257764e059e663b59ff2https://git.kernel.org/stable/c/7620a669111b52f224d006dea9e1e688e2d62c54https://git.kernel.org/stable/c/8b79feffeca28c5459458fe78676b081e87c93a4https://git.kernel.org/stable/c/d1629b5b925de9b27979e929dae7fcb766daf6b6
2024-03-15
Published