CVE-2021-32845: GHSL-2021-054_057: Code execution outside the virtualized guest in hyperkit - CVE-2021-32843, CVE-2021-32844, CVE-2021-32845, CVE-2021-32846
A malicious guest can trigger vulnerabilities in the host by abusing certain drivers that may lead to code execution outside the virtualized guest.
Other sources
HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, the implementation of qnotify at pcivtrndnotify fails to check the return value of vqgetchain. This leads to struct iovec iov; being uninitialized and used to read memory in len = (int) read(sc->vrscfd, iov.iovbase, iov.iovlen); when an attacker is able to make vqgetchain fail. This issue may lead to a guest crashing the host causing a denial of service and, under certain circumstance, memory corruption. This issue is fixed in commit 41272a980197917df8e58ff90642d14dec8fe948.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-32845?
CVE-2021-32845 is a vulnerability in HyperKit, a toolkit for embedding hypervisor capabilities in an application.
What is the severity of CVE-2021-32845?
CVE-2021-32845 has a severity rating of 7.8 (High)
How does CVE-2021-32845 affect HyperKit?
CVE-2021-32845 affects HyperKit versions 0.20210107 and prior.
How can I fix CVE-2021-32845?
To fix CVE-2021-32845, update to a version of HyperKit that is newer than 0.20210107.
Where can I find more information about CVE-2021-32845?
You can find more information about CVE-2021-32845 in the references provided.