CVE-2021-47389

A vulnerability was found in the Linux kernel’s KVM SVM implementation where the sev_receive_start() function fails to properly decommission the SEV context when binding an ASID fails, which leads to memory leaks and potential failures in subsequent SEV launches due to exhaustion of available SEV guest contexts.

This vulnerability is rated as a moderate because it does not directly allow unauthorized access or privilege escalation, it can cause significant disruptions in virtualized environments by exhausting SEV resources, which could lead to operational issues.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.