CVE-2021-4440

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The vulnerability is related to the x86/xen paravirt call in the Linux kernel. Specifically, the USERGS SYSRET64 call is used to return from a syscall via SYSRET, but a Xen PV guest will use the IRET hypercall instead, as there is no sysret PV hypercall defined. To resolve this, the USERGS SYSRET64 call is dropped, and the IRET exit is used from the beginning. This change simplifies the code and allows CLEAR CPU BUFFERS to be explicitly added to the syscall return via sysret path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.