KVM: arm64: Fix host stage-2 PGD refcount
Summary
GSD-2021-1002164: KVM: arm64: Fix host stage-2 PGD refcount. Affects Kernel versions >= 1025c8c0c6accfcbdc8f52ca1940160f65cd87d6, < 1d58a17ef54599506d44c45ac95be27273a4d2b1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a critical component of the Linux operating system. It provides the core functionality and interfaces for the system's hardware, software, and processes. The Kernel package is responsible for managing system resources, including memory, devices, and file systems. It plays a crucial role in ensuring the stability, security, and performance of the Linux operating system.
Vulnerability Detail
The KVM: arm64 vulnerability affects the host stage-2 PGD (Page Global Directory) refcount in the Kernel package. This vulnerability could potentially be exploited by an attacker to gain unauthorized access or execute arbitrary code on the affected system. The vulnerability was introduced in version v5.13 of the Linux Kernel and was fixed in version v5.15. The impact and attack plausibility of this vulnerability have not yet been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The KVM: arm64 vulnerability in the Kernel package could potentially allow unauthorized access or arbitrary code execution on the affected system. It is recommended to update to version v5.15 or later of the Linux Kernel to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is currently unknown as the attack plausibility has not been proven. However, if successfully exploited, an attacker could gain unauthorized access or execute arbitrary code on the affected system.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) and Vulert will analyze it in real-time to identify any open-source vulnerabilities, including this one.
Yes, a patch for this vulnerability is available in version v5.15 of the Linux Kernel. It is recommended to update to this version or a later one to fix the vulnerability.
The remote exploitability of this vulnerability is currently unknown. Further analysis and testing are required to determine if remote exploitation is possible.
You can find more information about this vulnerability in the GSD-2021-1002164 JSON file available in the GSD database on GitHub (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1002xxx/GSD-2021-1002164.json).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
