What is CVE-2021-46967?

CVE-2021-46967 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10. CVE-2021-46967 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2021-46967?

CVE-2021-46967 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2021-46967?

No patch is currently available for CVE-2021-46967. Monitor the NIST NVD and your Linux distribution's security advisories for updates.

Is CVE-2021-46967 actively exploited?

CVE-2021-46967 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2021-46967

Medium

In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping The virtqueue doorbell is usually implemented via registeres but we don't provide the necessary vma->flags like VM_PFNMAP. This may cause several issues e.g when userspace tries to map the doorbell via vhost IOTLB, kernel may panic due to the page is not backed by page structure. This patch fixes this by setting the necessary vm_flags. With this patch, try to map doorbell via IOTLB will fail with bad address.

Package Linux Kernel

Published 2024-02-27

Last modified 2024-12-06

CVSS version 3.1

Patch available

Awaiting data

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

The following references provide additional information about CVE-2021-46967 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.

Kernel patch commit
https://git.kernel.org/stable/c/3a3e0fad16d40a2aa68ddf7eea4acdf48b22dd44
Patch
Kernel patch commit
https://git.kernel.org/stable/c/3b8b6399666a29daa30b0bb3f5c9e3fc81c5a6a6
Patch
Kernel patch commit
https://git.kernel.org/stable/c/93dbbf20e3ffad14f04227a0b7105f6e6f0387ce
Patch

4 patch commits total View all on NVD

Details

CVE ID CVE-2021-46967

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2024-02-27

Modified 2024-12-06

KEV No

Patch Awaiting data

Package linux

Frequently asked questions

What is CVE-2021-46967?

CVE-2021-46967 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 . CVE-2021-46967 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2021-46967?

CVE-2021-46967 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2021-46967?

No patch is currently available for CVE-2021-46967. Monitor the NIST NVD and your Linux distribution's security advisories for updates.
Is CVE-2021-46967 actively exploited?

No — CVE-2021-46967 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.