CVE-2021-3501
Fixed in a distro release EPSS <1%
A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.
Products: Linux kernel
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | kernel-tools-libs-devel | 4.18.0-305.3.1.el8_4 |
| Arch Linux | linux | 5.11.16.arch1-1 |
| Arch Linux | linux-hardened | 5.11.16.hardened1-1 |
| Arch Linux | linux-lts | 5.10.32-1 |
| Arch Linux | linux-zen | 5.11.16.zen1-1 |
| Debian 12 | linux | 5.10.38-1 |
| Debian 13 | linux | 5.10.38-1 |
| Debian 14 | linux | 5.10.38-1 |
| Red Hat Enterprise Linux 8 | bpftool | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | bpftool-debuginfo | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-abi-stablelists | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-core | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-debug | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-debug-core | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-debug-debuginfo | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-debug-devel | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-debug-modules | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-debug-modules-extra | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo-common-aarch64 | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo-common-ppc64le | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo-common-s390x | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo-common-x86_64 | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-devel | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-doc | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-modules | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-modules-extra | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-rt | 0:4.18.0-305.3.1.rt7.75.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-rt-core | 0:4.18.0-305.3.1.rt7.75.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug | 0:4.18.0-305.3.1.rt7.75.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-core | 0:4.18.0-305.3.1.rt7.75.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-debuginfo | 0:4.18.0-305.3.1.rt7.75.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-devel | 0:4.18.0-305.3.1.rt7.75.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-kvm | 0:4.18.0-305.3.1.rt7.75.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-modules | 0:4.18.0-305.3.1.rt7.75.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-modules-extra | 0:4.18.0-305.3.1.rt7.75.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-rt-debuginfo | 0:4.18.0-305.3.1.rt7.75.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-rt-debuginfo-common-x86_64 | 0:4.18.0-305.3.1.rt7.75.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-rt-devel | 0:4.18.0-305.3.1.rt7.75.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-rt-kvm | 0:4.18.0-305.3.1.rt7.75.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-rt-modules | 0:4.18.0-305.3.1.rt7.75.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-rt-modules-extra | 0:4.18.0-305.3.1.rt7.75.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-tools | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-tools-debuginfo | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-tools-libs | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-tools-libs-devel | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-core | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-debuginfo | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-devel | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-modules | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-modules-extra | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | kpatch-patch-4_18_0-305 | 0:1-1.el8 |
| Red Hat Enterprise Linux 8 | kpatch-patch-4_18_0-305-debuginfo | 0:1-1.el8 |
| Red Hat Enterprise Linux 8 | kpatch-patch-4_18_0-305-debugsource | 0:1-1.el8 |
| Red Hat Enterprise Linux 8 | perf | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | perf-debuginfo | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | python3-perf | 0:4.18.0-305.3.1.el8_4 |
| Red Hat Enterprise Linux 8 | python3-perf-debuginfo | 0:4.18.0-305.3.1.el8_4 |
| Red Hat rhev hypervisor 4.4 | redhat-virtualization-host | 0:4.4.6-20210615.0.el8_4 |
| Red Hat rhev hypervisor 4.4 | redhat-virtualization-host-image-update | 0:4.4.6-20210615.0.el8_4 |
| Rocky Linux 8 | kernel | 0:4.18.0-305.3.1.el8_4 |
| Ubuntu 16.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-azure | no fix |
| Ubuntu 18.04 LTS | linux-azure-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-azure-edge | no fix |
| Ubuntu 18.04 LTS | linux-gcp | no fix |
| Ubuntu 18.04 LTS | linux-gcp-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-gcp-edge | no fix |
| Ubuntu 18.04 LTS | linux-gke-4.15 | no fix |
| Ubuntu 18.04 LTS | linux-hwe | no fix |
| Ubuntu 18.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-oem | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.3 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.10 | 5.10.0-1029.30 |
| Ubuntu 20.04 LTS | linux-raspi2 | no fix |
| Ubuntu 20.04 LTS | linux-riscv | no fix |