KVM: Improper handling of VM_IO/VM_PFNMAP vmas in KVM lets a guest bypass read-only checks

CVE-2021-22543Kernel, userspace & hypervisorcurated

Impact

Improper handling of VM_IO/VM_PFNMAP vmas in KVM lets a guest bypass read-only checks - host privilege escalation

Who can reach it

Tenant VM guest / local user with /dev/kvm

What to do

Kernel patch. Livepatchable on some vendors; KVM module changes often are not - budget drain + reboot

References

https://access.redhat.com/security/cve/CVE-2021-22543

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.