CVE-2021-22543 - CVE House
Back to Database
Status published High CVE-2021-22543

Improper memory handling in Linux KVM

Vulnerability Description

An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-22543

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • David Stevens
  • Kevin Hamacher
  • Jann Horn

References

More from Linux Kernel

View All →
CVE-2022-2785
Arbitrary Memory read in BPF Linux Kernel
Medium 6.7
CVE-2022-2503
Linux Kernel LoadPin bypass via dm-verity table reload
Medium 6.9
CVE-2022-2327
Use-after-free in io_uring ad work_flags in Linux Kernel
High 7.5
CVE-2021-23134
Linux kernel llcp_sock_bind/connect use-after-free
High 7.8
CVE-2021-23133
Linux Kernel sctp_destroy_sock race condition
Medium 6.7

Affected Vendor

Linux Kernel

View all reports →

Affected Software

Linux Kernel
Vulnerable Versions:
add6a0cd1c5ba51b201e1361b05a5df817083618

Timeline

Official Publish: May 26th, 2021
Last Modified: September 16th, 2024
Added to House: July 21st, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-119

MITRE ATT&CK TTPs

T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1203 Exploitation for Client Execution
Execution
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control