HomeDefectsLIN1024-1334
Acknowledged

LIN1024-1334 : Security Advisory - linux - CVE-2021-47255

Created: May 21, 2024    Updated: Jan 7, 2026
Resolved Date: May 22, 2024
Found In Version: 10.24.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

kvm: LAPIC: Restore guard to prevent illegal APIC register access

Per the SDM, "any access that touches bytes 4 through 15 of an APIC
register may cause undefined behavior and must not be executed."
Worse, such an access in kvm_lapic_reg_read can result in a leak of
kernel stack contents. Prior to commit 01402cf81051 ("kvm: LAPIC:
write down valid APIC registers"), such an access was explicitly
disallowed. Restore the guard that was removed in that commit.

CREATE(Triage):(User=admin) CVE-2021-47255 (https://nvd.nist.gov/vuln/detail/CVE-2021-47255)