CVE-2021-4032

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15 rc7

Description The issue is related to incomplete cleanup of temporary or auxiliary resources in the arch/x86/kvm/lapic.c component of the Kernel-based Virtual Machine (KVM) subsystem in the Linux kernel. This can lead to a denial of service when a failure allocation is detected, causing the KVM subsystem to crash the kernel due to mishandling of memory errors during VCPU construction. An attacker with special user privileges can exploit this to cause a denial of service.

Recommendations For Linux kernel versions prior to 5.15 rc7, update to version 5.15 rc7 or later to resolve the issue.