Skip to content
OpenAdvisories
Unscored CVE-2020-36313 EUVD-2020-23855GHSA-c45p-95wm-gfqp

An issue was discovered in the Linux kernel before 5.7. The KVM subsystem allows out-of-range access to memslots after a deletion, aka CID-…

Published Apr 6, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Package: linux-aws-5.0 Package: linux-aws-5.3 Package: linux-azure Package: linux-azure-5.3 Package: linux-azure-edge Package: linux-azure-fde-5.19 Package: linux-gcp Package: linux-gcp-5.3 Package: linux-gcp-edge Package: linux-gke-4.15 Package: linux-hwe Package: linux-hwe-edge Package: linux-oem Package: linux-oracle-5.0 Package: linux-oracle-5.3 Package: linux-raspi2 Package: linux-riscv Ecosystem: Ubuntu

Description

An issue was discovered in the Linux kernel before 5.7. The KVM subsystem allows out-of-range access to memslots after a deletion, aka CID-0774a964ef56. This affects arch/s390/kvm/kvm-s390.c, include/linux/kvm_host.h, and virt/kvm/kvm_main.c.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS linux-azure-fde-5.19 No fix yet —
Ubuntu 20.04 LTS linux-riscv +1 No fix yet —
Ubuntu 18.04 LTS linux-gcp +13 No fix yet —
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —

Advisories 1

References