CVE-2021-26932: Medium severity Linux Linux kernel vulnerability

Q: What is the severity of CVE-2021-26932?

CVE-2021-26932 has been classified with medium severity due to its potential impact on grant mapping operations in the Linux kernel.

Q: How do I fix CVE-2021-26932?

To fix CVE-2021-26932, you should update the Linux kernel to version 5.10.17 or later.

Q: Which versions of Linux are affected by CVE-2021-26932?

CVE-2021-26932 affects Linux kernel versions from 3.2 up to 5.10.16.

Q: What types of systems are vulnerable to CVE-2021-26932?

Systems using affected versions of the Linux kernel, including Fedora and Debian distributions, are vulnerable to CVE-2021-26932.

Q: Is there a workaround for CVE-2021-26932?

Currently, there are no known workarounds for CVE-2021-26932 besides applying the kernel update.

Published Feb 17, 2021

Updated

An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping operations often occur in batch hypercalls, where a number of operations are done in a single hypercall, the success or failure of each one is reported to the backend driver, and the backend driver then loops over the results, performing follow-up actions based on the success or failure of each operation. Unfortunately, when running in PV mode, the Linux backend drivers mishandle this: Some errors are ignored, effectively implying their success from the success of related batch elements. In other cases, errors resulting from one batch element lead to further batch elements not being inspected, and hence successful ones to not be possible to properly unmap upon error recovery. Only systems with Linux backends running in PV mode are vulnerable. Linux backends run in HVM / PVH modes are not vulnerable. This affects arch//xen/p2m.c and drivers/xen/gntdev.c.

Affected Software

102 affected componentsFixes available

Linux Linux kernel>=3.2<=5.10.16

Fedoraproject Fedora=32

Fedoraproject Fedora=33

Debian Debian Linux=9.0

NetApp Cloud Backup

NetApp Solidfire\, Enterprise Sds \& Hci Storage Node

NetApp Solidfire \& Hci Management Node

NetApp Hci Compute Node

All of the following

NetApp Hci H410c Firmware

NetApp Hci H410c

NetApp Hci H410c Firmware

NetApp Hci H410c

ubuntu/linux-aws<4.4.0-1090.94

4.4.0-1090.94

ubuntu/linux-azure<4.15.0-1114.127~14.04.1

4.15.0-1114.127~14.04.1

ubuntu/linux-lts-xenial<4.4.0-208.240~14.04.1

4.4.0-208.240~14.04.1

ubuntu/linux*

ubuntu/linux<4.4.0-208.240

4.4.0-208.240

ubuntu/linux-aws<4.4.0-1126.140

4.4.0-1126.140

ubuntu/linux-kvm<4.4.0-1091.100

4.4.0-1091.100

ubuntu/linux-aws-hwe<4.15.0-1102.109~16.04.1

4.15.0-1102.109~16.04.1

ubuntu/linux-azure<4.15.0-1114.127~16.04.1

4.15.0-1114.127~16.04.1

ubuntu/linux-gcp<4.15.0-1099.112~16.04.1

4.15.0-1099.112~16.04.1

ubuntu/linux-hwe<4.15.0-143.147~16.04.3

4.15.0-143.147~16.04.3

ubuntu/linux-oracle<4.15.0-1071.79~16.04.1

4.15.0-1071.79~16.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-fips<4.4.0-1060.66

4.4.0-1060.66

ubuntu/linux-fips*

ubuntu/linux<4.15.0-143.147

4.15.0-143.147

ubuntu/linux-aws<4.15.0-1102.109

4.15.0-1102.109

ubuntu/linux-aws-5.4<5.4.0-1043.45~18.04.1

5.4.0-1043.45~18.04.1

ubuntu/linux-azure-4.15<4.15.0-1114.127

4.15.0-1114.127

ubuntu/linux-azure-5.4<5.4.0-1044.46~18.04.1

5.4.0-1044.46~18.04.1

ubuntu/linux-dell300x<4.15.0-1018.22

4.15.0-1018.22

ubuntu/linux-gcp-4.15<4.15.0-1099.112

4.15.0-1099.112

ubuntu/linux-gcp-5.4<5.4.0-1041.44~18.04.1

5.4.0-1041.44~18.04.1

ubuntu/linux-gke-5.4<5.4.0-1040.42~18.04.1

5.4.0-1040.42~18.04.1

ubuntu/linux-gkeop-5.4<5.4.0-1013.14~18.04.1

5.4.0-1013.14~18.04.1

ubuntu/linux-hwe-5.4<5.4.0-71.79~18.04.1

5.4.0-71.79~18.04.1

ubuntu/linux-kvm<4.15.0-1091.93

4.15.0-1091.93

ubuntu/linux-oracle<4.15.0-1071.79

4.15.0-1071.79

ubuntu/linux-oracle-5.4<5.4.0-1042.45~18.04.1

5.4.0-1042.45~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1033.36~18.04.1

5.4.0-1033.36~18.04.1

ubuntu/linux-raspi2<4.15.0-1085.90

4.15.0-1085.90

ubuntu/linux-snapdragon<4.15.0-1102.111

4.15.0-1102.111

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-edge*

ubuntu/linux-gke-4.15*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-fips<4.15.0-2044.46

4.15.0-2044.46

ubuntu/linux-azure-fips<4.15.0-2026.29

4.15.0-2026.29

ubuntu/linux-fips<4.15.0-1059.67

4.15.0-1059.67

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-71.79

5.4.0-71.79

ubuntu/linux-aws<5.4.0-1043.45

5.4.0-1043.45

ubuntu/linux-azure<5.4.0-1044.46

5.4.0-1044.46

ubuntu/linux-gcp<5.4.0-1041.44

5.4.0-1041.44

ubuntu/linux-gke<5.4.0-1041.43

5.4.0-1041.43

ubuntu/linux-gkeop<5.4.0-1013.14

5.4.0-1013.14

ubuntu/linux-kvm<5.4.0-1037.38

5.4.0-1037.38

ubuntu/linux-oracle<5.4.0-1042.45

5.4.0-1042.45

ubuntu/linux-raspi<5.4.0-1033.36

5.4.0-1033.36

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde-5.15<5.15.0-1114.123~20.04.1

5.15.0-1114.123~20.04.1

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.8*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1069.73+fips2

5.4.0-1069.73+fips2

ubuntu/linux-azure-fips<5.4.0-1073.76+fips1

5.4.0-1073.76+fips1

ubuntu/linux-gcp-fips<5.4.0-1067.71~20.04.1

5.4.0-1067.71~20.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-realtime*

ubuntu/linux-raspi-realtime*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1090.94
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1114.127~14.04.1
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-208.240~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-208.240
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1126.140
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.4.0-1091.100
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1102.109~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1114.127~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1099.112~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-143.147~16.04.3
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1071.79~16.04.1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.4.0-1060.66
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-143.147
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1102.109
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1043.45~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1114.127
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1044.46~18.04.1
Upgrade
Upgrade ubuntu/linux-dell300x to a version that resolves this vulnerability.
Fixed in 4.15.0-1018.22
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1099.112
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1041.44~18.04.1
Upgrade
Upgrade ubuntu/linux-gke-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1040.42~18.04.1
Upgrade
Upgrade ubuntu/linux-gkeop-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1013.14~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-71.79~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1091.93
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1071.79
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1042.45~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1033.36~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi2 to a version that resolves this vulnerability.
Fixed in 4.15.0-1085.90
Upgrade
Upgrade ubuntu/linux-snapdragon to a version that resolves this vulnerability.
Fixed in 4.15.0-1102.111
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2044.46
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2026.29
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1059.67
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-71.79
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1043.45
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1044.46
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1041.44
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.4.0-1041.43
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.4.0-1013.14
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1037.38
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1042.45
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1033.36
Upgrade
Upgrade ubuntu/linux-azure-fde-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1114.123~20.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1069.73+fips2
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1073.76+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1067.71~20.04.1

Event History

Feb 17, 2021

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via OSV·02:15 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2021-26932?

CVE-2021-26932 has been classified with medium severity due to its potential impact on grant mapping operations in the Linux kernel.

How do I fix CVE-2021-26932?