CVE-2021-43056

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.15

Description The issue is related to an implementation bug in the arch/powerpc/kvm/book3s hv rmhandlers.S file, specifically in the handling of the SRR1 register values. This bug allows a malicious KVM guest to crash the host when it is running on Power8. The vulnerability is due to the lack of checking of returned data when processing SRR1 values.

Recommendations For versions prior to 5.14.15, update to version 5.14.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the KVM guest functionality to minimize the risk of exploitation.