CVE-2021-47605
kernel: vduse: fix memory corruption in vduse_dev_ioctl()
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 19, 2024
Updated · October 17, 2026
Description
A flaw was found in the Linux kernel's vDPA framework. This flaw allows an attacker with sufficient privileges to cause system instability, potentially causing a denial of service.
Statement
We do not believe Red Hat Enterprise Linux is vulnerable to this flaw, as the only products that contain the commit that introduced it also include the commit that fixed it.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-787 · Out-of-bounds Write