CVE-2021-47060

A flaw was found in the Linux kernel’s Kernel-based virtual machine (KVM) subsystem. The issue arises when looking for coalesced Memory-Mapped I/O (MMIO) zones if the bus is destroyed. The vulnerability is due to a failure in memory allocation for a new instance of the bus during the unregistration process. If the allocation fails, the system continues to walk through coalesced MMIO zones. This issue leads to a use-after-free scenario as the bus and devices are destroyed without notifying the caller.

Red Hat Enterprise Linux 8 and 9 are not affected by this vulnerability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.