Unscored CVE-2021-3736 EUVD-2021-27012GHSA-c24j-22f8-p2wg

A flaw was found in the Linux kernel. A memory leak problem was found in mbochs_ioctl in samples/vfio-mdev/mbochs.c in Virtual Function I/O…

Published Aug 23, 2022 · Updated Aug 3, 2024 · Assigned by redhat

Package: linux Package: linux-aws-5.0 Package: linux-aws-5.3 Package: linux-aws-5.8 Package: linux-azure Package: linux-azure-5.3 Package: linux-azure-5.8 Package: linux-azure-edge Package: linux-gcp Package: linux-gcp-5.3 Package: linux-gcp-5.8 Package: linux-gke-4.15 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.8 Package: linux-hwe-edge Package: linux-intel-5.13 Package: linux-oem Package: linux-oem-5.14 Package: linux-oem-5.6 Package: linux-oracle-5.0 Package: linux-oracle-5.3 Package: linux-oracle-5.8 Package: linux-raspi2 Package: linux-riscv Package: linux-riscv-5.8 Ecosystem: Debian Ecosystem: Ubuntu

Description

A flaw was found in the Linux kernel. A memory leak problem was found in mbochs_ioctl in samples/vfio-mdev/mbochs.c in Virtual Function I/O (VFIO) Mediated devices. This flaw could allow a local attacker to leak internal kernel information.

Affected products

Vendor	Product	Affected	Fixed
—	kernel	Fixed in v5.15-rc1	—

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	linux	5.14.6-1	—
Debian 13	linux	5.14.6-1	—
Debian 12	linux	5.14.6-1	—

Ubuntu