UBUNTU-CVE-2021-37576
arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.
02 / AFFECTED SOFTWARE
Affected packages
5 explicit affected versions
191 explicit affected versions
23 explicit affected versions
82 explicit affected versions
23 explicit affected versions
1 explicit affected versions
1 explicit affected versions
21 explicit affected versions
1 explicit affected versions
4 explicit affected versions
1 explicit affected versions
42 explicit affected versions
10 explicit affected versions
1 explicit affected versions
1 explicit affected versions
1 explicit affected versions
188 explicit affected versions
11 explicit affected versions
5 explicit affected versions
2 explicit affected versions
165 explicit affected versions
30 explicit affected versions
1 explicit affected versions
2 explicit affected versions
1 explicit affected versions
1 explicit affected versions
30 explicit affected versions
1 explicit affected versions
1 explicit affected versions
26 explicit affected versions
97 explicit affected versions
14 explicit affected versions
43 explicit affected versions
1 explicit affected versions
97 explicit affected versions
4 explicit affected versions
1 explicit affected versions
4 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.
05 / REFERENCES
Further evidence
- https://git.kernel.org/linus/f62f3c20647ebd5fb6ecb8f0b477b9281c44c10a
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f62f3c20647ebd5fb6ecb8f0b477b9281c44c10a
- https://lore.kernel.org/linuxppc-dev/[email protected]/T/#u
- https://ubuntu.com/security/CVE-2021-37576
- https://ubuntu.com/security/notices/USN-5091-1
- https://ubuntu.com/security/notices/USN-5092-1
- https://ubuntu.com/security/notices/USN-5092-2
- https://ubuntu.com/security/notices/USN-5094-1
- https://www.cve.org/CVERecord?id=CVE-2021-37576