CVE-2021-43056
Vulnerability Summary
Timeline
Description
An issue was discovered in the Linux kernel for powerpc before 5.14.15. It allows a malicious KVM guest to crash the host, when the host is running on Power8, due to an arch/powerpc/kvm/book3s_hv_rmhandlers.S implementation bug in the handling of the SRR1 register values.
CVSS Metrics
- v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- v2.0•MEDIUM•Score: 4.9AV:L/AC:L/Au:N/C:N/I:N/A:C
EPSS Trends
Current EPSS score: 0.37%• Percentile: 31%
Affected Systems
- debian•linux
< 5.10.84-1 | < 5.14.16-1 | < 5.14.16-1 | < 5.14.16-1
- ubuntu•linux
< 5.4.0-92.103
- ubuntu•linux-aws
< 5.4.0-1061.64
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
< 5.11.0-1023.24~20.04.1
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.4
< 5.4.0-1061.64~18.04.1
- ubuntu•linux-aws-5.8
all
- ubuntu•linux-aws-fips
< 5.4.0-1069.73+fips2 | all
- ubuntu•linux-azure
all | < 5.4.0-1065.68
- ubuntu•linux-azure-5.11
< 5.11.0-1023.24~20.04.1
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.4
< 5.4.0-1065.68~18.04.1
- ubuntu•linux-azure-5.8
all
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fips
< 5.4.0-1073.76+fips1 | all
- ubuntu•linux-bluefield
all | < 5.4.0-1023.26
- ubuntu•linux-fips
< 5.4.0-1038.44 | all
- ubuntu•linux-gcp
all | < 5.4.0-1059.63
- ubuntu•linux-gcp-5.11
< 5.11.0-1024.26~20.04.1
- ubuntu•linux-gcp-5.3
all
- ubuntu•linux-gcp-5.4
< 5.4.0-1059.63~18.04.1
- ubuntu•linux-gcp-5.8
all
- ubuntu•linux-gcp-fips
< 5.4.0-1067.71~20.04.1 | all
- ubuntu•linux-gke
< 5.4.0-1057.60
- ubuntu•linux-gke-4.15
all
- ubuntu•linux-gke-5.4
< 5.4.0-1057.60~18.04.1
- ubuntu•linux-gkeop
< 5.4.0-1029.30
- ubuntu•linux-gkeop-5.4
< 5.4.0-1029.30~18.04.2
- ubuntu•linux-hwe
all
- ubuntu•linux-hwe-5.11
< 5.11.0-44.48~20.04.2
- ubuntu•linux-hwe-5.13
< 5.13.0-23.23~20.04.2
- ubuntu•linux-hwe-5.4
< 5.4.0-92.103~18.04.2
- ubuntu•linux-hwe-5.8
all
- ubuntu•linux-hwe-edge
all | all
- ubuntu•linux-ibm
< 5.4.0-1010.11
- ubuntu•linux-intel-5.13
all
- ubuntu•linux-intel-iot-realtime
all
- ubuntu•linux-kvm
< 5.4.0-1051.53
- ubuntu•linux-oem
all
- ubuntu•linux-oem-5.10
< 5.10.0-1051.53
- ubuntu•linux-oem-5.13
< 5.13.0-1026.32
- ubuntu•linux-oem-5.14
< 5.14.0-1008.8
- ubuntu•linux-oem-5.6
all
- ubuntu•linux-oracle
< 5.4.0-1059.63
- ubuntu•linux-oracle-5.0
all
- ubuntu•linux-oracle-5.11
< 5.11.0-1023.24~20.04.1
- ubuntu•linux-oracle-5.3
all
- ubuntu•linux-oracle-5.4
< 5.4.0-1059.63~18.04.1
- ubuntu•linux-oracle-5.8
all
Showing first 50 affected entries in server-rendered view.
References (16)
- https://git.kernel.org/linus/cdeb5d7d890e14f3b70e8087e745c4a6a7d9f337
- https://lore.kernel.org/linuxppc-dev/87pmrtbbdt.fsf%40mpe.ellerman.id.au/T/#u
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15
- http://www.openwall.com/lists/oss-security/2021/10/28/1
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBM4FP3IT3JZ2O7EBS7TEOG657N4ZGRE/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RRAIS3PG4EV5WFLYESR6FXWM4BJJGWVA/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AA7EAPPKWG4LMTQQLNNSKATY6ST2KQFE/
- https://ubuntu.com/security/CVE-2021-43056
- https://lore.kernel.org/linuxppc-dev/87pmrtbbdt.fsf@mpe.ellerman.id.au/T/#u
- https://ubuntu.com/security/notices/USN-5139-1
- https://ubuntu.com/security/notices/USN-5165-1
- https://ubuntu.com/security/notices/USN-5208-1
- https://ubuntu.com/security/notices/USN-5210-1
- https://ubuntu.com/security/notices/USN-5218-1
- https://www.cve.org/CVERecord?id=CVE-2021-43056
- https://security-tracker.debian.org/tracker/CVE-2021-43056