CVE-2021-26930

Advisory lineage Upstream: 0 Downstream: 27
Modified
Published: 17 Feb 2021, 00:00
Last modified:03 Aug 2024, 20:33

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
7.8 HIGH
v3.1 (nvd)
EPSS Score
0.08% LOW
0% probability -0.03%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

17 Feb 2021, 00:00
Published
Vulnerability first disclosed
03 Aug 2024, 20:33
Last Modified
Vulnerability information updated

Description

An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be encountered. In one case, an error encountered earlier might be discarded by later processing, resulting in the caller assuming successful mapping, and hence subsequent operations trying to access space that wasn't mapped. In another case, internal state would be insufficiently updated, preventing safe recovery from the error. This affects drivers/block/xen-blkback/blkback.c.

CVSS Metrics

  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • v2.0•MEDIUM•Score: 4.6AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 0.08%• Percentile: 24%

Affected Systems

  • debian•debian_linux

    9.0

  • fedoraproject•fedora

    32 | 33

  • linux•linux_kernel

    ≥ 3.11, ≤ 5.10.16

References (7)