CVE-2021-47465 is a vulnerability in the Linux kernel, specifically affecting the KVM (Kernel-based Virtual Machine) for PowerPC Book3S HV architectures. The issue stems from incorrect stack handling in the idle_kvm_start_guest() function, leading to memory corruption on the emergency stack. With a CVSS score of 5.5 (MEDIUM), this vulnerability has a local attack vector, low attack complexity, and requires low privileges. Its primary impact is a high availability risk, potentially causing system instability or crashes, though confidentiality and integrity are not directly affected. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this CVE. It is not listed in CISA's Known Exploited Vulnerabilities Catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 5.2, < 5.4.156CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.5, < 5.10.76CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.11, < 5.14.15CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
5.15CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:* | ||
5.15CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.