CVE-2021-47639

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, specifically in the KVM (Kernel-based Virtual Machine) component. The issue arises when unmapping a GFN (Guest Frame Number) range in the TDP MMU, where KVM fails to zap all roots, including invalid ones. This can lead to use-after-free and other issues if the mmu notifier runs to completion while an invalid root zapper yields. The bug can be reproduced by causing a collision between set nx huge pages() and kvm mmu notifier release().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.