CVE-2021-46967: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping
In the Linux kernel, the following vulnerability has been resolved:
vhost-vdpa: fix vmflags for virtqueue doorbell mapping
The virtqueue doorbell is usually implemented via registeres but we don't provide the necessary vma->flags like VMPFNMAP. This may cause several issues e.g when userspace tries to map the doorbell via vhost IOTLB, kernel may panic due to the page is not backed by page structure. This patch fixes this by setting the necessary vmflags. With this patch, try to map doorbell via IOTLB will fail with bad address.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch vhost-vdpa: fix vm_flags for virtqueue doorbell mapping
Event History
Frequently Asked Questions
What is the severity of CVE-2021-46967?
CVE-2021-46967 has been rated as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2021-46967?
To fix CVE-2021-46967, you should update your Linux kernel to a version that is newer than 5.12.3.
What versions of the Linux kernel are affected by CVE-2021-46967?
CVE-2021-46967 affects Linux kernel versions from 5.8 up to 5.12.3.
What components are involved in the CVE-2021-46967 vulnerability?
The CVE-2021-46967 vulnerability involves the vhost-vdpa component and its virtqueue doorbell mapping.
What are the potential impacts of CVE-2021-46967 on my system?
The potential impacts of CVE-2021-46967 may include system instability and unexpected behavior due to improper virtual memory mapping.