Name: CVE-2021-22543: Improper Restriction of Operations within the Bounds of a Memory Buffer
Creator: Rapid7
Published: 2021-05-26T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-22543, CWE-119, CVSS 7.8, EPSS 0.00005

An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation.

CVSS Details

CVSS 4.0 Base Score: 9.3 (Critical)
CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L)
CVSS 3.1 Base Score: 7.8
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade kernel-tools-libs-devel	May 4, 2022	May 26, 2021
Amazon Linux Ami 2	—	Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.243-185.433Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64	Aug 25, 2021	May 26, 2021
Amazon_linux	—	Upgrade kernel	Oct 5, 2021	May 26, 2021
Centos_linux	—	Upgrade kpatch-patch-4_18_0-305_10_2Upgrade kpatch-patch-4_18_0-305Upgrade kpatch-patch-4_18_0-305-debuginfoUpgrade kpatch-patch-3_10_0-1160_21_1Upgrade kpatch-patch-3_10_0-1160_41_1Upgrade kpatch-patch-3_10_0-1160_41_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_42_2-debuginfoUpgrade kpatch-patch-4_18_0-305_3_1-debugsourceUpgrade kpatch-patch-3_10_0-1160_11_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-305_7_1Upgrade kpatch-patch-3_10_0-1160_2_2Upgrade kpatch-patch-3_10_0-1160_2_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_15_2-debuginfoUpgrade kpatch-patch-4_18_0-305_10_2-debuginfoUpgrade kpatch-patch-4_18_0-305_3_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_36_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_6_1Upgrade kpatch-patch-3_10_0-1160_15_2Upgrade kpatch-patch-4_18_0-305_3_1Upgrade kpatch-patch-4_18_0-305_7_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_25_1Upgrade kpatch-patch-3_10_0-1160_31_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_42_2Upgrade kpatch-patch-3_10_0-1160_36_2Upgrade kpatch-patch-3_10_0-1160_6_1-debuginfoUpgrade kpatch-patch-4_18_0-305-debugsourceUpgrade kpatch-patch-3_10_0-1160_31_1Upgrade kpatch-patch-3_10_0-1160_2_1Upgrade kpatch-patch-3_10_0-1160_25_1-debuginfoUpgrade kpatch-patch-4_18_0-305_10_2-debugsourceUpgrade kpatch-patch-3_10_0-1160_11_1Upgrade kpatch-patch-4_18_0-305_7_1-debugsourceUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_24_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_24_1Upgrade kpatch-patch-3_10_0-1160_2_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_21_1-debuginfo	Aug 12, 2021	May 26, 2021
Debian	—	Upgrade linux	Nov 29, 2021	May 26, 2021
Huawei Euleros 2_0_sp9	—	Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools	Apr 19, 2022	May 26, 2021
Oracle_linux	—	Upgrade kernelUpgrade kernel-uek	Aug 12, 2021	May 18, 2021
Redhat_linux	—	Upgrade kernelNo solution existsUpgrade kernel-rt	Aug 12, 2021	May 26, 2021
Rocky_linux	—	Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo	May 5, 2022	May 26, 2021
Suse	—	Upgrade kernel-livepatch-5_3_18-24_70-defaultUpgrade kernel-livepatch-5_3_18-59_5-defaultUpgrade dtb-hisiliconUpgrade kernel-sourceUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade kgraft-patch-4_12_14-122_77-defaultUpgrade kernel-devel-azureUpgrade kernel-livepatch-5_3_18-24_75-defaultUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-livepatch-5_3_18-59_13-defaultUpgrade kernel-livepatch-5_3_18-24_43-defaultUpgrade kernel-preempt-livepatch-develUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade kernel-livepatch-5_3_18-24_61-defaultUpgrade kernel-obs-qaUpgrade kernel-livepatch-5_3_18-24_78-defaultUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-debugUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-preemptUpgrade kernel-macrosUpgrade kernel-azure-baseUpgrade kernel-vanilla-develUpgrade kernel-docs-htmlUpgrade kernel-livepatch-5_3_18-24_53_4-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-livepatch-4_12_14-197_89-defaultUpgrade kernel-livepatch-4_12_14-197_64-defaultUpgrade dtb-allwinnerUpgrade kgraft-patch-4_12_14-122_66-defaultUpgrade kselftests-kmp-azureUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-livepatch-5_3_18-24_12-defaultUpgrade kernel-vanillaUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-livepatch-4_12_14-150_58-defaultUpgrade kernel-livepatch-4_12_14-197_67-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-livepatch-5_3_18-24_29-defaultUpgrade kernel-azure-optionalUpgrade kernel-debug-baseUpgrade kgraft-patch-4_12_14-95_83-defaultUpgrade kernel-livepatch-4_12_14-197_51-defaultUpgrade kgraft-patch-4_12_14-122_74-defaultUpgrade kernel-default-kgraftUpgrade kernel-kvmsmallUpgrade gfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-livepatch-4_12_14-197_75-defaultUpgrade kernel-livepatch-4_12_14-150_72-defaultUpgrade dtb-amlogicUpgrade kernel-kvmsmall-baseUpgrade dtb-amdUpgrade kernel-livepatch-5_3_18-59_10-defaultUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kgraft-patch-4_12_14-95_74-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-preemptUpgrade kernel-vanilla-baseUpgrade kernel-64kb-develUpgrade kernel-livepatch-4_12_14-197_99-defaultUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade dtb-apmUpgrade ocfs2-kmp-preemptUpgrade kernel-livepatch-5_3_18-24_64-defaultUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kgraft-patch-4_12_14-122_46-defaultUpgrade kernel-livepatch-5_3_18-24_34-defaultUpgrade kernel-livepatch-4_12_14-150_63-defaultUpgrade kernel-debug-develUpgrade kselftests-kmp-preemptUpgrade kgraft-patch-4_12_14-95_65-defaultUpgrade kgraft-patch-4_12_14-122_54-defaultUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-livepatch-5_3_18-24_15-defaultUpgrade dtb-renesasUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade dtb-zteUpgrade dtb-socionextUpgrade kernel-livepatch-5_3_18-57-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kgraft-patch-4_12_14-95_71-defaultUpgrade kgraft-patch-4_12_14-122_32-defaultUpgrade kgraft-patch-4_12_14-122_37-defaultUpgrade kgraft-patch-4_12_14-95_80-defaultUpgrade kernel-livepatch-4_12_14-197_86-defaultUpgrade gfs2-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-livepatch-5_3_18-59_19-defaultUpgrade dtb-mediatekUpgrade kgraft-patch-4_12_14-122_71-defaultUpgrade kgraft-patch-4_12_14-122_60-defaultUpgrade kernel-preempt-optionalUpgrade kernel-livepatch-5_3_18-24_52-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-default-kgraft-develUpgrade dtb-xilinxUpgrade dlm-kmp-preemptUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade kernel-livepatch-4_12_14-197_72-defaultUpgrade kgraft-patch-4_12_14-95_77-defaultUpgrade kgraft-patch-4_12_14-122_83-defaultUpgrade kgraft-patch-4_12_14-122_80-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade kgraft-patch-4_12_14-122_41-defaultUpgrade kernel-livepatch-4_12_14-197_56-defaultUpgrade kernel-livepatch-5_3_18-24_37-defaultUpgrade kernel-source-vanillaUpgrade dlm-kmp-azureUpgrade kernel-preempt-extraUpgrade kernel-default-baseUpgrade kernel-zfcpdump-manUpgrade kernel-livepatch-4_12_14-150_69-defaultUpgrade dtb-alUpgrade kernel-livepatch-4_12_14-197_92-defaultUpgrade dtb-armUpgrade kernel-livepatch-5_3_18-24_24-defaultUpgrade kernel-livepatch-4_12_14-197_102-defaultUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-preempt-develUpgrade kgraft-patch-4_12_14-95_60-defaultUpgrade kernel-livepatch-4_12_14-150_78-defaultUpgrade dtb-sprdUpgrade kgraft-patch-4_12_14-122_51-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-livepatch-4_12_14-150_75-defaultUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-livepatch-4_12_14-197_61-defaultUpgrade kernel-livepatch-5_3_18-24_67-defaultUpgrade kernel-default-manUpgrade kgraft-patch-4_12_14-122_57-defaultUpgrade kgraft-patch-4_12_14-122_63-defaultUpgrade kernel-livepatch-5_3_18-59_16-defaultUpgrade kgraft-patch-4_12_14-95_68-defaultUpgrade kernel-vanilla-livepatch-devel	Aug 11, 2021	May 26, 2021
Ubuntu	—	Upgrade linux-image-oem-20.04Upgrade linux-image-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-84-generic-lpaeUpgrade linux-image-5.4.0-1023-gkeopUpgrade linux-image-4.15.0-1109-gcpUpgrade linux-image-4.15.0-159-lowlatencyUpgrade linux-image-5.4.0-84-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-1096-raspi2Upgrade linux-image-oemUpgrade linux-image-5.11.0-1017-raspiUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.11.0-1017-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.11.0-34-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1113-snapdragonUpgrade linux-image-5.4.0-1052-gkeUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1028-dell300xUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.11.0-1018-gcpUpgrade linux-image-4.15.0-1100-kvmUpgrade linux-image-5.11.0-34-genericUpgrade linux-image-snapdragonUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-84-genericUpgrade linux-image-5.8.0-1043-azureUpgrade linux-image-5.11.0-1015-azureUpgrade linux-image-azureUpgrade linux-image-5.4.0-1046-kvmUpgrade linux-image-awsUpgrade linux-image-5.11.0-34-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-dell300xUpgrade linux-image-gke-5.4Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1056-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1052-gcpUpgrade linux-image-4.15.0-1081-oracleUpgrade linux-image-4.15.0-1124-azureUpgrade linux-image-5.10.0-1049-oemUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-5.11.0-34-generic-64kUpgrade linux-image-5.4.0-1054-oracleUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1058-azureUpgrade linux-image-oem-osp1Upgrade linux-image-gkeopUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1043-raspiUpgrade linux-image-genericUpgrade linux-image-4.15.0-159-genericUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1112-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-159-generic-lpaeUpgrade linux-image-5.11.0-1015-kvmUpgrade linux-image-5.11.0-1017-oracleUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-oracleUpgrade linux-image-5.11.0-1017-awsUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-lts-20.04	Sep 9, 2021	May 26, 2021
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	May 26, 2021

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business