A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 6, 2021 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel | Jul 4, 2022 | May 6, 2021 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-305Upgrade kpatch-patch-4_18_0-305-debugsourceUpgrade kpatch-patch-4_18_0-305-debuginfoUpgrade kernel-rtUpgrade kernel | Jun 2, 2021 | May 6, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 6, 2021 |
| Oracle_linux | — | Upgrade kernel | Jun 3, 2021 | Apr 13, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 2, 2021 | May 6, 2021 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-cross-headers | May 5, 2022 | May 6, 2021 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-kvmUpgrade linux-image-5.11.0-1008-awsUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-5.11.0-1007-oracleUpgrade linux-image-5.11.0-1008-gcpUpgrade linux-image-5.11.0-1009-raspiUpgrade linux-image-5.11.0-1009-raspi-nolpaeUpgrade linux-image-5.11.0-18-generic-lpaeUpgrade linux-image-5.10.0-1029-oemUpgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-5.11.0-1006-azureUpgrade linux-image-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-5.11.0-1008-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-5.11.0-18-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.11.0-18-generic-64kUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-5.11.0-18-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpae | Jun 3, 2021 | May 6, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 5, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub