CVE-2021-47061

KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU

References

Notes

 carnil> Introduced in f65886606c2d ("KVM: fix memory leak in
 carnil> kvm_io_bus_unregister_dev()"). Vulnerable versions: 4.4.238 4.9.238 4.14.200
 carnil> 4.19.148 5.4.66 5.8.10 5.9-rc5.

Bugs

Status

Branch Status
4.19-buster-security needed
4.19-upstream-stable needed
5.10-bullseye-security N/A "Fixed before branching point"
5.10-upstream-stable released (5.10.37) [03c6cccedd3913006744faa252a4da5145299343]
6.1-bookworm-security N/A "Fixed before branching point"
6.1-upstream-stable N/A "Fixed before branching point"
6.6-upstream-stable N/A "Fixed before branching point"
6.8-upstream-stable N/A "Fixed before branching point"
sid released (5.10.38-1)
upstream released (5.13-rc1) [2ee3757424be7c1cd1d0bbfa6db29a7edd82a250]