Read the docs
TI-2021-05506 Aliases CVE-2021-22543

Improper memory handling in Linux KVM

Priority LOW 39CWE-119Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
High
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · Low
Fix status
Partial Red Hat: 42 fixed, 1 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-119 and the CVSS impact.

Summary

An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation.

Why it matters now

EPSS 0.0066 51st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial Red Hat: 21 advisoriesRed Hat: 42 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

No affected products listed by the sources yet.

CPE configurations NVD · 22

CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:2021-05-18:*:*:*:*:*:*:*2021-05-18VulnerableLinux
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*33VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*34VulnerableFedoraproject
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
  • cpe:2.3:o:linux:linux_kernel:2021-05-18:*:*:*:*:*:*:* Versions 2021-05-18 Vulnerable ·Linux
  • cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* Versions 33 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* Versions 34 Vulnerable ·Fedoraproject
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
  • cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
Show 12 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
  • cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp

Remediation

Red Hat 21 advisories

  • RHSA-2022:5640 Released 2022-07-19 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server (v. 6 ELS) kernel-2.6.32-754.48.1.el6, kernel-abi-whitelists-2.6.32-754.48.1.el6, kernel-debug-2.6.32-754.48.1.el6 +7
    • Red Hat Enterprise Linux Server Optional (v. 6 ELS) python-perf-2.6.32-754.48.1.el6
  • RHSA-2021:4000 Released 2021-10-26 · Red Hat rating Important
    kpatch-patch security update
    • Red Hat Enterprise Linux Server E4S (v. 7.7) kpatch-patch-3_10_0-1062_40_1-1-6.el7, kpatch-patch-3_10_0-1062_43_1-1-6.el7, kpatch-patch-3_10_0-1062_45_1-1-6.el7 +5
  • RHSA-2021:3987 Released 2021-10-26 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 7.7) bpftool-3.10.0-1062.59.1.el7, kernel-3.10.0-1062.59.1.el7, kernel-abi-whitelists-3.10.0-1062.59.1.el7 +8
    • Red Hat Enterprise Linux Server E4S (v. 7.7) bpftool-3.10.0-1062.59.1.el7, kernel-3.10.0-1062.59.1.el7, kernel-abi-whitelists-3.10.0-1062.59.1.el7 +9
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.59.1.el7
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.7) kernel-debug-devel-3.10.0-1062.59.1.el7, kernel-tools-libs-devel-3.10.0-1062.59.1.el7
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.59.1.el7
    • Red Hat Enterprise Linux Server TUS (v. 7.7) bpftool-3.10.0-1062.59.1.el7, kernel-3.10.0-1062.59.1.el7, kernel-abi-whitelists-3.10.0-1062.59.1.el7 +8
Show 18 more Red Hat advisories
  • RHSA-2021:3943 Released 2021-10-20 · Red Hat rating Moderate
    RHV-H security update (redhat-virtualization-host) 4.3.19
    • RHEL 7-based RHEV-H for RHEV 4 (build requirements) redhat-virtualization-host-4.3.19-20211013.0.el7_9, redhat-virtualization-host-image-update-4.3.19-20211013.0.el7_9
    • Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host-4.3.19-20211013.0.el7_9, redhat-virtualization-host-image-update-4.3.19-20211013.0.el7_9
  • RHSA-2021:3801 Released 2021-10-12 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-1160.45.1.el7, kernel-3.10.0-1160.45.1.el7, kernel-abi-whitelists-3.10.0-1160.45.1.el7 +8
    • Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.45.1.el7
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.45.1.el7
    • Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-1160.45.1.el7, kernel-3.10.0-1160.45.1.el7, kernel-abi-whitelists-3.10.0-1160.45.1.el7 +11
    • Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-1160.45.1.el7, kernel-tools-libs-devel-3.10.0-1160.45.1.el7
    • Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-1160.45.1.el7, kernel-3.10.0-1160.45.1.el7, kernel-abi-whitelists-3.10.0-1160.45.1.el7 +8
    • Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.45.1.el7
  • RHSA-2021:3802 Released 2021-10-12 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux for Real Time (v. 7) kernel-rt-3.10.0-1160.45.1.rt56.1185.el7, kernel-rt-debug-3.10.0-1160.45.1.rt56.1185.el7, kernel-rt-debug-devel-3.10.0-1160.45.1.rt56.1185.el7 +4
    • Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-1160.45.1.rt56.1185.el7, kernel-rt-debug-3.10.0-1160.45.1.rt56.1185.el7, kernel-rt-debug-devel-3.10.0-1160.45.1.rt56.1185.el7 +7
  • RHSA-2021:3812 Released 2021-10-12 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server AUS (v. 7.6) bpftool-3.10.0-957.84.1.el7, kernel-3.10.0-957.84.1.el7, kernel-abi-whitelists-3.10.0-957.84.1.el7 +8
    • Red Hat Enterprise Linux Server E4S (v. 7.6) kernel-3.10.0-957.84.1.el7, kernel-abi-whitelists-3.10.0-957.84.1.el7, kernel-bootwrapper-3.10.0-957.84.1.el7 +8
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.6) kernel-tools-libs-devel-3.10.0-957.84.1.el7
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.6) kernel-debug-devel-3.10.0-957.84.1.el7, kernel-tools-libs-devel-3.10.0-957.84.1.el7
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.6) kernel-tools-libs-devel-3.10.0-957.84.1.el7
    • Red Hat Enterprise Linux Server TUS (v. 7.6) bpftool-3.10.0-957.84.1.el7, kernel-3.10.0-957.84.1.el7, kernel-abi-whitelists-3.10.0-957.84.1.el7 +8
  • RHSA-2021:3814 Released 2021-10-12 · Red Hat rating Important
    kpatch-patch security update
    • Red Hat Enterprise Linux Server E4S (v. 7.6) kpatch-patch-3_10_0-957_61_1-1-6.el7, kpatch-patch-3_10_0-957_61_2-1-6.el7, kpatch-patch-3_10_0-957_62_1-1-6.el7 +7
  • RHSA-2021:3768 Released 2021-10-12 · Red Hat rating Important
    kpatch-patch security update
    • Red Hat Enterprise Linux Server (v. 7) kpatch-patch-3_10_0-1160_11_1-1-9.el7, kpatch-patch-3_10_0-1160_15_2-1-9.el7, kpatch-patch-3_10_0-1160_21_1-1-7.el7 +9
  • RHSA-2021:3767 Released 2021-10-12 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server AUS (v. 7.2) kernel-3.10.0-327.101.1.el7, kernel-abi-whitelists-3.10.0-327.101.1.el7, kernel-debug-3.10.0-327.101.1.el7 +7
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.101.1.el7
  • RHSA-2021:3766 Released 2021-10-12 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server AUS (v. 7.3) kernel-3.10.0-514.93.1.el7, kernel-abi-whitelists-3.10.0-514.93.1.el7, kernel-debug-3.10.0-514.93.1.el7 +7
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.93.1.el7
  • RHSA-2021:3725 Released 2021-10-05 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 7.4) kernel-3.10.0-693.94.1.el7, kernel-abi-whitelists-3.10.0-693.94.1.el7, kernel-debug-3.10.0-693.94.1.el7 +7
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.94.1.el7
  • RHSA-2021:3363 Released 2021-08-31 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat CodeReady Linux Builder EUS (v. 8.2) kernel-tools-libs-devel-4.18.0-193.64.1.el8_2
    • Red Hat Enterprise Linux BaseOS EUS (v. 8.2) bpftool-4.18.0-193.64.1.el8_2, kernel-4.18.0-193.64.1.el8_2, kernel-abi-whitelists-4.18.0-193.64.1.el8_2 +19
  • RHSA-2021:3380 Released 2021-08-31 · Red Hat rating Important
    kpatch-patch security update
    • Red Hat Enterprise Linux BaseOS EUS (v. 8.2) kpatch-patch-4_18_0-193_19_1-1-11.el8_2, kpatch-patch-4_18_0-193_28_1-1-9.el8_2, kpatch-patch-4_18_0-193_29_1-1-9.el8_2 +8
  • RHSA-2021:3375 Released 2021-08-31 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux Real Time EUS (v. 8.2) kernel-rt-4.18.0-193.64.1.rt13.115.el8_2, kernel-rt-core-4.18.0-193.64.1.rt13.115.el8_2, kernel-rt-debug-4.18.0-193.64.1.rt13.115.el8_2 +7
    • Red Hat Enterprise Linux Real Time for NFV EUS (v. 8.2) kernel-rt-4.18.0-193.64.1.rt13.115.el8_2, kernel-rt-core-4.18.0-193.64.1.rt13.115.el8_2, kernel-rt-debug-4.18.0-193.64.1.rt13.115.el8_2 +9
  • RHSA-2021:3235 Released 2021-08-19 · Red Hat rating Important
    Red Hat Virtualization Host security and bug fix update [ovirt-4.4.7]
    • Red Hat Virtualization 4 Hypervisor for RHEL 8 redhat-virtualization-host-4.4.7-20210804.0.el8_4, redhat-virtualization-host-image-update-4.4.7-20210804.0.el8_4
  • RHSA-2021:3173 Released 2021-08-17 · Red Hat rating Important
    kernel security update
    • Red Hat CodeReady Linux Builder EUS (v. 8.1) kernel-tools-libs-devel-4.18.0-147.52.1.el8_1
    • Red Hat Enterprise Linux BaseOS EUS (v. 8.1) bpftool-4.18.0-147.52.1.el8_1, kernel-4.18.0-147.52.1.el8_1, kernel-abi-whitelists-4.18.0-147.52.1.el8_1 +19
  • RHSA-2021:3181 Released 2021-08-17 · Red Hat rating Important
    kpatch-patch security update
    • Red Hat Enterprise Linux BaseOS EUS (v. 8.1) kpatch-patch-4_18_0-147_27_1-1-12.el8_1, kpatch-patch-4_18_0-147_32_1-1-10.el8_1, kpatch-patch-4_18_0-147_34_1-1-10.el8_1 +6
  • RHSA-2021:3057 Released 2021-08-10 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-305.12.1.el8_4
    • Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-305.12.1.el8_4, kernel-4.18.0-305.12.1.el8_4, kernel-abi-stablelists-4.18.0-305.12.1.el8_4 +19
  • RHSA-2021:3088 Released 2021-08-10 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux Real Time (v. 8) kernel-rt-4.18.0-305.12.1.rt7.84.el8_4, kernel-rt-core-4.18.0-305.12.1.rt7.84.el8_4, kernel-rt-debug-4.18.0-305.12.1.rt7.84.el8_4 +7
    • Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt-4.18.0-305.12.1.rt7.84.el8_4, kernel-rt-core-4.18.0-305.12.1.rt7.84.el8_4, kernel-rt-debug-4.18.0-305.12.1.rt7.84.el8_4 +9
  • RHSA-2021:3044 Released 2021-08-10 · Red Hat rating Important
    kpatch-patch security update
    • Red Hat Enterprise Linux BaseOS (v. 8) kpatch-patch-4_18_0-305-1-4.el8, kpatch-patch-4_18_0-305_10_2-1-1.el8_4, kpatch-patch-4_18_0-305_3_1-1-3.el8_4 +1

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 7AffectedNo fix yet
RHEL 7-based RHEV-H for RHEV 4 (build requirements)Fixed RHSA-2021:3943
Red Hat CodeReady Linux Builder (v. 8)Fixed RHSA-2021:3057
Red Hat CodeReady Linux Builder EUS (v. 8.1)Fixed RHSA-2021:3173
Red Hat CodeReady Linux Builder EUS (v. 8.2)Fixed RHSA-2021:3363
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2021:3044, RHSA-2021:3057
Red Hat Enterprise Linux BaseOS EUS (v. 8.1)Fixed RHSA-2021:3173, RHSA-2021:3181
Red Hat Enterprise Linux BaseOS EUS (v. 8.2)Fixed RHSA-2021:3363, RHSA-2021:3380
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2021:3801
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2021:3801
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2021:3801
Red Hat Enterprise Linux Real Time (v. 8)Fixed RHSA-2021:3088
Red Hat Enterprise Linux Real Time EUS (v. 8.2)Fixed RHSA-2021:3375
Red Hat Enterprise Linux Real Time for NFV (v. 8)Fixed RHSA-2021:3088
Red Hat Enterprise Linux Real Time for NFV EUS (v. 8.2)Fixed RHSA-2021:3375
Red Hat Enterprise Linux Server (v. 6 ELS)Fixed RHSA-2022:5640
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2021:3768, RHSA-2021:3801
Red Hat Enterprise Linux Server AUS (v. 7.2)Fixed RHSA-2021:3767
Red Hat Enterprise Linux Server AUS (v. 7.3)Fixed RHSA-2021:3766
Red Hat Enterprise Linux Server AUS (v. 7.4)Fixed RHSA-2021:3725
Red Hat Enterprise Linux Server AUS (v. 7.6)Fixed RHSA-2021:3812
Red Hat Enterprise Linux Server AUS (v. 7.7)Fixed RHSA-2021:3987
Red Hat Enterprise Linux Server E4S (v. 7.6)Fixed RHSA-2021:3812, RHSA-2021:3814
Red Hat Enterprise Linux Server E4S (v. 7.7)Fixed RHSA-2021:3987, RHSA-2021:4000
Red Hat Enterprise Linux Server Optional (v. 6 ELS)Fixed RHSA-2022:5640
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2021:3801
Red Hat Enterprise Linux Server Optional AUS (v. 7.2)Fixed RHSA-2021:3767
Red Hat Enterprise Linux Server Optional AUS (v. 7.3)Fixed RHSA-2021:3766
Red Hat Enterprise Linux Server Optional AUS (v. 7.4)Fixed RHSA-2021:3725
Red Hat Enterprise Linux Server Optional AUS (v. 7.6)Fixed RHSA-2021:3812
Red Hat Enterprise Linux Server Optional AUS (v. 7.7)Fixed RHSA-2021:3987
Red Hat Enterprise Linux Server Optional E4S (v. 7.6)Fixed RHSA-2021:3812
Red Hat Enterprise Linux Server Optional E4S (v. 7.7)Fixed RHSA-2021:3987
Red Hat Enterprise Linux Server Optional TUS (v. 7.6)Fixed RHSA-2021:3812
Red Hat Enterprise Linux Server Optional TUS (v. 7.7)Fixed RHSA-2021:3987
Red Hat Enterprise Linux Server TUS (v. 7.6)Fixed RHSA-2021:3812
Red Hat Enterprise Linux Server TUS (v. 7.7)Fixed RHSA-2021:3987
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2021:3801
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2021:3801
Red Hat Enterprise Linux for Real Time (v. 7)Fixed RHSA-2021:3802
Red Hat Enterprise Linux for Real Time for NFV (v. 7)Fixed RHSA-2021:3802
Red Hat Virtualization 4 Hypervisor for RHEL 7Fixed RHSA-2021:3943
Red Hat Virtualization 4 Hypervisor for RHEL 8Fixed RHSA-2021:3235
Not affected: 3 products
  • RHEL 7-based RHEV-H for RHEV 4 (build requirements)
  • RHEL 8-based RHEV-H for RHEV 4 (build requirements)
  • Red Hat Enterprise Linux 9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-22543
  2. 2026-10-07 EPSS moved to the 50th–90th percentile

References

Exploit 1

Advisory 5

Other 1

  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
  • TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
  • TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
  • TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
  • TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3
See all 15278 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences