CVE-2021-28039: An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen

Description

An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less-common configurations, an x86 PV guest OS user can crash a Dom0 or driver domain via a large amount of I/O activity. The issue relates to misuse of guest physical addresses when a configuration has CONFIG_XEN_UNPOPULATED_ALLOC but not CONFIG_XEN_BALLOON_MEMORY_HOTPLUG.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Changed

Exploitation

Is it being used?

Exploit prediction (EPSS)0.4% · higher than 37% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

KE

Kernel · Linux

5.9.0 through 5.11.3 · source: NVD

CB

Cloud Backup · Netapp

All versions, or not specified · source: NVD

SB

Solidfire Baseboard Management Controller Firmware · Netapp

All versions, or not specified · source: NVD

XE

Xen · Xen

All versions, or not specified · source: NVD