CVE-2021-26932

Advisory lineage Upstream: 0 Downstream: 20
Modified
Published: 17 Feb 2021, 00:00
Last modified:03 Aug 2024, 20:33

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.18% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

17 Feb 2021, 00:00
Published
Vulnerability first disclosed
03 Aug 2024, 20:33
Last Modified
Vulnerability information updated

Description

An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping operations often occur in batch hypercalls, where a number of operations are done in a single hypercall, the success or failure of each one is reported to the backend driver, and the backend driver then loops over the results, performing follow-up actions based on the success or failure of each operation. Unfortunately, when running in PV mode, the Linux backend drivers mishandle this: Some errors are ignored, effectively implying their success from the success of related batch elements. In other cases, errors resulting from one batch element lead to further batch elements not being inspected, and hence successful ones to not be possible to properly unmap upon error recovery. Only systems with Linux backends running in PV mode are vulnerable. Linux backends run in HVM / PVH modes are not vulnerable. This affects arch/*/xen/p2m.c and drivers/xen/gntdev.c.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • v2.0•LOW•Score: 1.9AV:L/AC:M/Au:N/C:N/I:N/A:P

EPSS Trends

Current EPSS score: 0.18%• Percentile: 40%

Affected Systems

  • debian•debian_linux

    9.0

  • fedoraproject•fedora

    32 | 33

  • linux•linux_kernel

    ≥ 3.2, ≤ 5.10.16

  • netapp•cloud_backup

    na

  • netapp•hci_compute_node_firmware

    na

  • netapp•hci_h410c_firmware

    na

  • netapp•solidfire_\&_hci_management_node

    na

  • netapp•solidfire\,_enterprise_sds_\&_hci_storage_node

    na

References (7)