What’s Vulnerable › Vulnerabilities

CVE-2021-46967: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-27 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping The virtqueue doorbell is usually implemented via registeres but we don't provide the necessary vma->flags like VM_PFNMAP. This may cause several issues e.g when userspace tries to map the doorbell via vhost IOTLB, kernel may panic due to the page is not backed by page structure. This patch fixes this by setting the necessary vm_flags. With this patch, try to map doorbell via IOTLB will fail with bad address.

Affected products

• Linux kernel: from 5.8 before 5.10.36; from 5.11 before 5.11.20; from 5.12 before 5.12.3 — fixed in 5.10.36, 5.11.20, 5.12.3

How to fix

Upgrade to a fixed version: Linux kernel 5.10.36, 5.11.20, 5.12.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3a3e0fad16d40a2aa68ddf7eea4acdf48b22dd44
• https://git.kernel.org/stable/c/3b8b6399666a29daa30b0bb3f5c9e3fc81c5a6a6
• https://git.kernel.org/stable/c/93dbbf20e3ffad14f04227a0b7105f6e6f0387ce
• https://git.kernel.org/stable/c/940230a5c31e2714722aee04c521a21f484b4df7
• https://git.kernel.org/stable/c/3a3e0fad16d40a2aa68ddf7eea4acdf48b22dd44
• https://git.kernel.org/stable/c/3b8b6399666a29daa30b0bb3f5c9e3fc81c5a6a6
• https://git.kernel.org/stable/c/93dbbf20e3ffad14f04227a0b7105f6e6f0387ce
• https://git.kernel.org/stable/c/940230a5c31e2714722aee04c521a21f484b4df7

Get alerted when CVE-2021-46967 or the next vulnerability affects your stack