NetSight
high7.8

CVE-2021-47296

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak vcpu_put is not called if the user copy fa…

Impact

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak vcpu_put is not called if the user copy fails. This can result in preempt notifier corruption and crashes, among other issues.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.18 before 4.19.199
from 4.20 before 5.4.136
from 5.5 before 5.10.54
from 5.11 before 5.13.6
Version 5.14

Weakness classification

References