CVE-2021-47390

A vulnerability was found in the Linux kernel’s KVM subsystem in ioapic_write_indirect() function, beacuse of incorrect stack allocation for the vcpu_bitmap, which is defined as a single long instead of the required size to support all virtual CPUs, which causes out-of-bounds memory access, leading to potential system crashes

This vulnerability is rated as a moderate severity because it impacting the reliability of virtual machine operations which does not directly facilitate arbitrary code execution or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.