CVE Database›Document archive›CVE-2021-47341

CVE-2021-47341

kernel: KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio

Loading…

Severity

Moderate

Red Hat Product Security

7.8

CVSS 3.1

Review impact separately from score.

Published · May 21, 2024

Updated · August 5, 2026

Description

A vulnerability was found in the Linux kernel’s KVM subsystem in the kvm_vm_ioctl_unregister_coalesced_mmio function, where an uninitialized memory value could be accessed if a certain operation failed. This could lead to unpredictable behavior or system crashes due to the use of freed memory.

Statement

This vulnerability is rated as a moderate severity because it can cause system crashes or instability by accessing invalid memory.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 · Use After Free