CVE-2021-46977 - Vulnerability Details - OpenCVE

ReportizFlow

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Disable preemption when probing user return MSRs Disable preemption when probing a user return MSR via RDSMR/WRMSR. If the MSR holds a different value per logical CPU, the WRMSR could corrupt the host's value if KVM is preempted between the RDMSR and WRMSR, and then rescheduled on a different CPU. Opportunistically land the helper in common x86, SVM will use the helper in a future commit.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/31f29749ee970c251b3a7e5b914108425940d089
https://git.kernel.org/stable/c/5104d7ffcf24749939bea7fdb5378d186473f890
https://git.kernel.org/stable/c/5adcdeb57007ccf8ab7ac20bf787ffb6fafb1a94
https://git.kernel.org/stable/c/e3ea1895df719c4ef87862501bb10d95f4177bed
https://lore.kernel.org/linux-cve-announce/2024022822-CVE-2021-46977-76be@gregkh/T/#u
https://nvd.nist.gov/vuln/detail/CVE-2021-46977
https://www.cve.org/CVERecord?id=CVE-2021-46977

History

Mon, 04 Nov 2024 13:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-02-28T08:13:08.489Z

Updated: 2024-12-19T07:32:53.915Z

Reserved: 2024-02-27T18:42:55.944Z

Link: CVE-2021-46977

Vulnrichment

Updated: 2024-08-04T05:24:38.401Z

NVD

Status : Awaiting Analysis

Published: 2024-02-28T09:15:37.140

Modified: 2024-11-21T06:35:05.900

Link: CVE-2021-46977

Redhat

Severity : Moderate

Publid Date: 2024-02-28T00:00:00Z

Links: CVE-2021-46977 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-46977", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-27T18:42:55.944Z", "datePublished": "2024-02-28T08:13:08.489Z", "dateUpdated": "2024-12-19T07:32:53.915Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T07:32:53.915Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: VMX: Disable preemption when probing user return MSRs\n\nDisable preemption when probing a user return MSR via RDSMR/WRMSR. If\nthe MSR holds a different value per logical CPU, the WRMSR could corrupt\nthe host's value if KVM is preempted between the RDMSR and WRMSR, and\nthen rescheduled on a different CPU.\n\nOpportunistically land the helper in common x86, SVM will use the helper\nin a future commit."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/x86/include/asm/kvm_host.h", "arch/x86/kvm/vmx/vmx.c", "arch/x86/kvm/x86.c"], "versions": [{"version": "4be5341026246870818e28b53202b001426a5aec", "lessThan": "31f29749ee970c251b3a7e5b914108425940d089", "status": "affected", "versionType": "git"}, {"version": "4be5341026246870818e28b53202b001426a5aec", "lessThan": "5adcdeb57007ccf8ab7ac20bf787ffb6fafb1a94", "status": "affected", "versionType": "git"}, {"version": "4be5341026246870818e28b53202b001426a5aec", "lessThan": "e3ea1895df719c4ef87862501bb10d95f4177bed", "status": "affected", "versionType": "git"}, {"version": "4be5341026246870818e28b53202b001426a5aec", "lessThan": "5104d7ffcf24749939bea7fdb5378d186473f890", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/x86/include/asm/kvm_host.h", "arch/x86/kvm/vmx/vmx.c", "arch/x86/kvm/x86.c"], "versions": [{"version": "5.5", "status": "affected"}, {"version": "0", "lessThan": "5.5", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.38", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.11.22", "lessThanOrEqual": "5.11.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.12.5", "lessThanOrEqual": "5.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.13", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/31f29749ee970c251b3a7e5b914108425940d089"}, {"url": "https://git.kernel.org/stable/c/5adcdeb57007ccf8ab7ac20bf787ffb6fafb1a94"}, {"url": "https://git.kernel.org/stable/c/e3ea1895df719c4ef87862501bb10d95f4177bed"}, {"url": "https://git.kernel.org/stable/c/5104d7ffcf24749939bea7fdb5378d186473f890"}], "title": "KVM: VMX: Disable preemption when probing user return MSRs", "x_generator": {"engine": "bippy-5f407fcff5a0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-21T16:27:41.559362Z", "id": "CVE-2021-46977", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-21T16:27:50.764Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:38.401Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/31f29749ee970c251b3a7e5b914108425940d089", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5adcdeb57007ccf8ab7ac20bf787ffb6fafb1a94", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e3ea1895df719c4ef87862501bb10d95f4177bed", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5104d7ffcf24749939bea7fdb5378d186473f890", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/31f29749ee970c251b3a7e5b914108425940d089", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5adcdeb57007ccf8ab7ac20bf787ffb6fafb1a94", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e3ea1895df719c4ef87862501bb10d95f4177bed", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5104d7ffcf24749939bea7fdb5378d186473f890", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:38.401Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-46977", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-21T16:27:41.559362Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-21T16:27:46.953Z"}}], "cna": {"title": "KVM: VMX: Disable preemption when probing user return MSRs", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4be5341026246870818e28b53202b001426a5aec", "lessThan": "31f29749ee970c251b3a7e5b914108425940d089", "versionType": "git"}, {"status": "affected", "version": "4be5341026246870818e28b53202b001426a5aec", "lessThan": "5adcdeb57007ccf8ab7ac20bf787ffb6fafb1a94", "versionType": "git"}, {"status": "affected", "version": "4be5341026246870818e28b53202b001426a5aec", "lessThan": "e3ea1895df719c4ef87862501bb10d95f4177bed", "versionType": "git"}, {"status": "affected", "version": "4be5341026246870818e28b53202b001426a5aec", "lessThan": "5104d7ffcf24749939bea7fdb5378d186473f890", "versionType": "git"}], "programFiles": ["arch/x86/include/asm/kvm_host.h", "arch/x86/kvm/vmx/vmx.c", "arch/x86/kvm/x86.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.5"}, {"status": "unaffected", "version": "0", "lessThan": "5.5", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.38", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.11.22", "versionType": "semver", "lessThanOrEqual": "5.11.*"}, {"status": "unaffected", "version": "5.12.5", "versionType": "semver", "lessThanOrEqual": "5.12.*"}, {"status": "unaffected", "version": "5.13", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["arch/x86/include/asm/kvm_host.h", "arch/x86/kvm/vmx/vmx.c", "arch/x86/kvm/x86.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/31f29749ee970c251b3a7e5b914108425940d089"}, {"url": "https://git.kernel.org/stable/c/5adcdeb57007ccf8ab7ac20bf787ffb6fafb1a94"}, {"url": "https://git.kernel.org/stable/c/e3ea1895df719c4ef87862501bb10d95f4177bed"}, {"url": "https://git.kernel.org/stable/c/5104d7ffcf24749939bea7fdb5378d186473f890"}], "x_generator": {"engine": "bippy-5f407fcff5a0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: VMX: Disable preemption when probing user return MSRs\n\nDisable preemption when probing a user return MSR via RDSMR/WRMSR. If\nthe MSR holds a different value per logical CPU, the WRMSR could corrupt\nthe host's value if KVM is preempted between the RDMSR and WRMSR, and\nthen rescheduled on a different CPU.\n\nOpportunistically land the helper in common x86, SVM will use the helper\nin a future commit."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T07:32:53.915Z"}}}, "cveMetadata": {"cveId": "CVE-2021-46977", "state": "PUBLISHED", "dateUpdated": "2024-12-19T07:32:53.915Z", "dateReserved": "2024-02-27T18:42:55.944Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-02-28T08:13:08.489Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: VMX: Disable preemption when probing user return MSRs\n\nDisable preemption when probing a user return MSR via RDSMR/WRMSR. If\nthe MSR holds a different value per logical CPU, the WRMSR could corrupt\nthe host's value if KVM is preempted between the RDMSR and WRMSR, and\nthen rescheduled on a different CPU.\n\nOpportunistically land the helper in common x86, SVM will use the helper\nin a future commit."}, {"lang": "es", "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: KVM: VMX: deshabilite la preferencia al sondear los MSR devueltos por el usuario. Deshabilite la preferencia al sondear el MSR devuelto por un usuario a trav\u00e9s de RDSMR/WRMSR. Si MSR tiene un valor diferente por CPU l\u00f3gica, WRMSR podr\u00eda da\u00f1ar el valor del host si KVM se adelanta entre RDMSR y WRMSR y luego se reprograma en una CPU diferente. De manera oportunista, coloque el asistente en x86 com\u00fan, SVM usar\u00e1 el asistente en una confirmaci\u00f3n futura."}], "id": "CVE-2021-46977", "lastModified": "2024-11-21T06:35:05.900", "metrics": {}, "published": "2024-02-28T09:15:37.140", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/31f29749ee970c251b3a7e5b914108425940d089"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5104d7ffcf24749939bea7fdb5378d186473f890"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5adcdeb57007ccf8ab7ac20bf787ffb6fafb1a94"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e3ea1895df719c4ef87862501bb10d95f4177bed"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/31f29749ee970c251b3a7e5b914108425940d089"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/5104d7ffcf24749939bea7fdb5378d186473f890"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/5adcdeb57007ccf8ab7ac20bf787ffb6fafb1a94"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/e3ea1895df719c4ef87862501bb10d95f4177bed"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Awaiting Analysis"}