CVE-2021-46977

Summary

CVE-2021-46977 is a vulnerability affecting the Linux kernel that has been addressed. The issue lies in the KVM (Kernel-based Virtual Machine) component, where disabling preemption during the probing of user return MSRs (Model-Specific Registers) can lead to corruption of the host's value if KVM is preempted between an RDMSR (Read Model-Specific Register) and WRMSR (Write Model-Specific Register) operation, and then rescheduled on a different CPU. This vulnerability, if exploited, could allow unauthorized modification of the host's MSR values. The problem has been mitigated by disabling preemption during the entire MSR probing sequence in the Linux kernel.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.