Vulnerability-Lookup

CVE-2021-47110 (GCVE-0-2021-47110)

Vulnerability from cvelistv5 – Published: 2024-03-15 20:14 – Updated: 2026-05-11 13:48

Title

x86/kvm: Disable kvmclock on all CPUs on shutdown

Summary

In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Disable kvmclock on all CPUs on shutdown Currenly, we disable kvmclock from machine_shutdown() hook and this only happens for boot CPU. We need to disable it for all CPUs to guard against memory corruption e.g. on restore from hibernate. Note, writing '0' to kvmclock MSR doesn't clear memory location, it just prevents hypervisor from updating the location so for the short while after write and while CPU is still alive, the clock remains usable and correct so we don't need to switch to some other clocksource.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-03-18 16:10 UTC

Assigner

Linux mitre root

References

4 references

URL	Tags
https://git.kernel.org/stable/c/9084fe1b3572664ad…
https://git.kernel.org/stable/c/3b0becf8b1ecf642a…
https://git.kernel.org/stable/c/1df2dc09926f61319…
https://git.kernel.org/stable/c/c02027b5742b5aa80…

Impacted products

2 products

Vendor	Product	Version	CPE status
Linux	Linux	Affected: 1e977aa12dd4f80688b1f243762212e75c6d7fe8 , < 9084fe1b3572664ad276f427dce575f580c9799a (git) Affected: 1e977aa12dd4f80688b1f243762212e75c6d7fe8 , < 3b0becf8b1ecf642a9edaf4c9628ffc641e490d6 (git) Affected: 1e977aa12dd4f80688b1f243762212e75c6d7fe8 , < 1df2dc09926f61319116c80ee85701df33577d70 (git) Affected: 1e977aa12dd4f80688b1f243762212e75c6d7fe8 , < c02027b5742b5aa804ef08a4a9db433295533046 (git)	guessed
Linux	Linux	Affected: 2.6.26 Unaffected: 0 , < 2.6.26 (semver) Unaffected: 5.4.125 , ≤ 5.4.* (semver) Unaffected: 5.10.43 , ≤ 5.10.* (semver) Unaffected: 5.12.10 , ≤ 5.12.* (semver) Unaffected: 5.13 , ≤ * (original_commit_for_fix)	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47110",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-03-18T16:10:03.353776Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:13:56.037Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:24:39.913Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/9084fe1b3572664ad276f427dce575f580c9799a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/3b0becf8b1ecf642a9edaf4c9628ffc641e490d6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1df2dc09926f61319116c80ee85701df33577d70"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c02027b5742b5aa804ef08a4a9db433295533046"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/x86/include/asm/kvm_para.h",
            "arch/x86/kernel/kvm.c",
            "arch/x86/kernel/kvmclock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "9084fe1b3572664ad276f427dce575f580c9799a",
              "status": "affected",
              "version": "1e977aa12dd4f80688b1f243762212e75c6d7fe8",
              "versionType": "git"
            },
            {
              "lessThan": "3b0becf8b1ecf642a9edaf4c9628ffc641e490d6",
              "status": "affected",
              "version": "1e977aa12dd4f80688b1f243762212e75c6d7fe8",
              "versionType": "git"
            },
            {
              "lessThan": "1df2dc09926f61319116c80ee85701df33577d70",
              "status": "affected",
              "version": "1e977aa12dd4f80688b1f243762212e75c6d7fe8",
              "versionType": "git"
            },
            {
              "lessThan": "c02027b5742b5aa804ef08a4a9db433295533046",
              "status": "affected",
              "version": "1e977aa12dd4f80688b1f243762212e75c6d7fe8",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "arch/x86/include/asm/kvm_para.h",
            "arch/x86/kernel/kvm.c",
            "arch/x86/kernel/kvmclock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.26"
            },
            {
              "lessThan": "2.6.26",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.125",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.43",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.12.*",
              "status": "unaffected",
              "version": "5.12.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.125",
                  "versionStartIncluding": "2.6.26",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.43",
                  "versionStartIncluding": "2.6.26",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.12.10",
                  "versionStartIncluding": "2.6.26",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.13",
                  "versionStartIncluding": "2.6.26",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kvm: Disable kvmclock on all CPUs on shutdown\n\nCurrenly, we disable kvmclock from machine_shutdown() hook and this\nonly happens for boot CPU. We need to disable it for all CPUs to\nguard against memory corruption e.g. on restore from hibernate.\n\nNote, writing \u00270\u0027 to kvmclock MSR doesn\u0027t clear memory location, it\njust prevents hypervisor from updating the location so for the short\nwhile after write and while CPU is still alive, the clock remains usable\nand correct so we don\u0027t need to switch to some other clocksource."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:48:15.825Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/9084fe1b3572664ad276f427dce575f580c9799a"
        },
        {
          "url": "https://git.kernel.org/stable/c/3b0becf8b1ecf642a9edaf4c9628ffc641e490d6"
        },
        {
          "url": "https://git.kernel.org/stable/c/1df2dc09926f61319116c80ee85701df33577d70"
        },
        {
          "url": "https://git.kernel.org/stable/c/c02027b5742b5aa804ef08a4a9db433295533046"
        }
      ],
      "title": "x86/kvm: Disable kvmclock on all CPUs on shutdown",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47110",
    "datePublished": "2024-03-15T20:14:19.183Z",
    "dateReserved": "2024-03-04T18:12:48.836Z",
    "dateUpdated": "2026-05-11T13:48:15.825Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2021-47110",
      "date": "2026-09-16",
      "epss": "0.00243",
      "percentile": "0.1567"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nx86/kvm: Disable kvmclock on all CPUs on shutdown\\n\\nCurrenly, we disable kvmclock from machine_shutdown() hook and this\\nonly happens for boot CPU. We need to disable it for all CPUs to\\nguard against memory corruption e.g. on restore from hibernate.\\n\\nNote, writing \u00270\u0027 to kvmclock MSR doesn\u0027t clear memory location, it\\njust prevents hypervisor from updating the location so for the short\\nwhile after write and while CPU is still alive, the clock remains usable\\nand correct so we don\u0027t need to switch to some other clocksource.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se resolvi\\u00f3 la siguiente vulnerabilidad: x86/kvm: deshabilite kvmclock en todas las CPU al apagar Actualmente, deshabilitamos kvmclock desde el enlace machine_shutdown() y esto solo sucede para la CPU de arranque. Necesitamos deshabilitarlo para todas las CPU para protegernos contra la corrupci\\u00f3n de la memoria, por ejemplo, al restaurar desde la hibernaci\\u00f3n. Tenga en cuenta que escribir \u00270\u0027 en kvmclock MSR no borra la ubicaci\\u00f3n de la memoria, solo evita que el hipervisor actualice la ubicaci\\u00f3n, por lo que durante un breve per\\u00edodo despu\\u00e9s de la escritura y mientras la CPU a\\u00fan est\\u00e1 activa, el reloj permanece utilizable y correcto, por lo que no lo necesitamos. para cambiar a alguna otra fuente de reloj.\"}]",
      "id": "CVE-2021-47110",
      "lastModified": "2024-11-21T06:35:25.077",
      "published": "2024-03-15T21:15:06.530",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/1df2dc09926f61319116c80ee85701df33577d70\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/3b0becf8b1ecf642a9edaf4c9628ffc641e490d6\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/9084fe1b3572664ad276f427dce575f580c9799a\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/c02027b5742b5aa804ef08a4a9db433295533046\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/1df2dc09926f61319116c80ee85701df33577d70\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/3b0becf8b1ecf642a9edaf4c9628ffc641e490d6\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/9084fe1b3572664ad276f427dce575f580c9799a\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/c02027b5742b5aa804ef08a4a9db433295533046\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2021-47110\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-03-15T21:15:06.530\",\"lastModified\":\"2026-06-17T04:16:30.913\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nx86/kvm: Disable kvmclock on all CPUs on shutdown\\n\\nCurrenly, we disable kvmclock from machine_shutdown() hook and this\\nonly happens for boot CPU. We need to disable it for all CPUs to\\nguard against memory corruption e.g. on restore from hibernate.\\n\\nNote, writing \u00270\u0027 to kvmclock MSR doesn\u0027t clear memory location, it\\njust prevents hypervisor from updating the location so for the short\\nwhile after write and while CPU is still alive, the clock remains usable\\nand correct so we don\u0027t need to switch to some other clocksource.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: x86/kvm: deshabilite kvmclock en todas las CPU al apagar Actualmente, deshabilitamos kvmclock desde el enlace machine_shutdown() y esto solo sucede para la CPU de arranque. Necesitamos deshabilitarlo para todas las CPU para protegernos contra la corrupci\u00f3n de la memoria, por ejemplo, al restaurar desde la hibernaci\u00f3n. Tenga en cuenta que escribir \u00270\u0027 en kvmclock MSR no borra la ubicaci\u00f3n de la memoria, solo evita que el hipervisor actualice la ubicaci\u00f3n, por lo que durante un breve per\u00edodo despu\u00e9s de la escritura y mientras la CPU a\u00fan est\u00e1 activa, el reloj permanece utilizable y correcto, por lo que no lo necesitamos. para cambiar a alguna otra fuente de reloj.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"arch/x86/include/asm/kvm_para.h\",\"arch/x86/kernel/kvm.c\",\"arch/x86/kernel/kvmclock.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"1e977aa12dd4f80688b1f243762212e75c6d7fe8\",\"lessThan\":\"9084fe1b3572664ad276f427dce575f580c9799a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"1e977aa12dd4f80688b1f243762212e75c6d7fe8\",\"lessThan\":\"3b0becf8b1ecf642a9edaf4c9628ffc641e490d6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"1e977aa12dd4f80688b1f243762212e75c6d7fe8\",\"lessThan\":\"1df2dc09926f61319116c80ee85701df33577d70\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"1e977aa12dd4f80688b1f243762212e75c6d7fe8\",\"lessThan\":\"c02027b5742b5aa804ef08a4a9db433295533046\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"arch/x86/include/asm/kvm_para.h\",\"arch/x86/kernel/kvm.c\",\"arch/x86/kernel/kvmclock.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.26\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.26\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.125\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.43\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.12.10\",\"lessThanOrEqual\":\"5.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.13\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-03-18T16:10:03.353776Z\",\"id\":\"CVE-2021-47110\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-459\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.4.125\",\"matchCriteriaId\":\"F463D47B-F1A3-457B-87D0-92D3B3A033B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.43\",\"matchCriteriaId\":\"B2136BD5-4F86-40C8-96C8-5C90A015490C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.12.10\",\"matchCriteriaId\":\"27384800-AB48-4C08-891E-34B66F5FC4AA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"0CBAD0FC-C281-4666-AB2F-F8E6E1165DF7\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/1df2dc09926f61319116c80ee85701df33577d70\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3b0becf8b1ecf642a9edaf4c9628ffc641e490d6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9084fe1b3572664ad276f427dce575f580c9799a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c02027b5742b5aa804ef08a4a9db433295533046\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1df2dc09926f61319116c80ee85701df33577d70\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3b0becf8b1ecf642a9edaf4c9628ffc641e490d6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9084fe1b3572664ad276f427dce575f580c9799a\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c02027b5742b5aa804ef08a4a9db433295533046\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T13:45:35+00:00",
      "cve": "CVE-2021-47110",
      "id": "CVE-2021-47110",
      "initial_release_date": "2021-01-01T00:00:00+00:00",
      "product_status:known_affected": "42",
      "product_status:known_not_affected": "156",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: x86/kvm: Disable kvmclock on all CPUs on shutdown",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-47110.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-26T02:24:10Z",
      "cve": "CVE-2021-47110",
      "id": "CVE-2021-47110",
      "initial_release_date": "2024-03-19T03:50:26Z",
      "product_status:known_affected": "479",
      "product_status:known_not_affected": "197",
      "product_status:recommended": "236",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2021-47110",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2021-47110.json",
      "version": "60"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/9084fe1b3572664ad276f427dce575f580c9799a\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/3b0becf8b1ecf642a9edaf4c9628ffc641e490d6\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/1df2dc09926f61319116c80ee85701df33577d70\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/c02027b5742b5aa804ef08a4a9db433295533046\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-04T05:24:39.913Z\"}}, {\"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2021-47110\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-03-18T16:10:03.353776Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-23T19:01:18.430Z\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"title\": \"x86/kvm: Disable kvmclock on all CPUs on shutdown\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"1e977aa12dd4f80688b1f243762212e75c6d7fe8\", \"lessThan\": \"9084fe1b3572664ad276f427dce575f580c9799a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1e977aa12dd4f80688b1f243762212e75c6d7fe8\", \"lessThan\": \"3b0becf8b1ecf642a9edaf4c9628ffc641e490d6\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1e977aa12dd4f80688b1f243762212e75c6d7fe8\", \"lessThan\": \"1df2dc09926f61319116c80ee85701df33577d70\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1e977aa12dd4f80688b1f243762212e75c6d7fe8\", \"lessThan\": \"c02027b5742b5aa804ef08a4a9db433295533046\", \"versionType\": \"git\"}], \"programFiles\": [\"arch/x86/include/asm/kvm_para.h\", \"arch/x86/kernel/kvm.c\", \"arch/x86/kernel/kvmclock.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.6.26\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"2.6.26\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.4.125\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.43\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.12.10\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.12.*\"}, {\"status\": \"unaffected\", \"version\": \"5.13\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"arch/x86/include/asm/kvm_para.h\", \"arch/x86/kernel/kvm.c\", \"arch/x86/kernel/kvmclock.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/9084fe1b3572664ad276f427dce575f580c9799a\"}, {\"url\": \"https://git.kernel.org/stable/c/3b0becf8b1ecf642a9edaf4c9628ffc641e490d6\"}, {\"url\": \"https://git.kernel.org/stable/c/1df2dc09926f61319116c80ee85701df33577d70\"}, {\"url\": \"https://git.kernel.org/stable/c/c02027b5742b5aa804ef08a4a9db433295533046\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nx86/kvm: Disable kvmclock on all CPUs on shutdown\\n\\nCurrenly, we disable kvmclock from machine_shutdown() hook and this\\nonly happens for boot CPU. We need to disable it for all CPUs to\\nguard against memory corruption e.g. on restore from hibernate.\\n\\nNote, writing \u00270\u0027 to kvmclock MSR doesn\u0027t clear memory location, it\\njust prevents hypervisor from updating the location so for the short\\nwhile after write and while CPU is still alive, the clock remains usable\\nand correct so we don\u0027t need to switch to some other clocksource.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.125\", \"versionStartIncluding\": \"2.6.26\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.43\", \"versionStartIncluding\": \"2.6.26\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.12.10\", \"versionStartIncluding\": \"2.6.26\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.13\", \"versionStartIncluding\": \"2.6.26\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2025-05-21T08:31:36.590Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2021-47110\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-21T08:31:36.590Z\", \"dateReserved\": \"2024-03-04T18:12:48.836Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-03-15T20:14:19.183Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

FKIE_CVE-2021-47110

Vulnerability from fkie_nvd - Published: 2024-03-15 21:15 - Updated: 2026-06-17 04:16

Severity

7.1 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Summary

References

URL	Tags
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/1df2dc09926f61319116c80ee85701df33577d70	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/3b0becf8b1ecf642a9edaf4c9628ffc641e490d6	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/9084fe1b3572664ad276f427dce575f580c9799a	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/c02027b5742b5aa804ef08a4a9db433295533046	Patch
af854a3a-2127-422b-91ae-364da2661108	https://git.kernel.org/stable/c/1df2dc09926f61319116c80ee85701df33577d70	Patch
af854a3a-2127-422b-91ae-364da2661108	https://git.kernel.org/stable/c/3b0becf8b1ecf642a9edaf4c9628ffc641e490d6	Patch
af854a3a-2127-422b-91ae-364da2661108	https://git.kernel.org/stable/c/9084fe1b3572664ad276f427dce575f580c9799a	Patch
af854a3a-2127-422b-91ae-364da2661108	https://git.kernel.org/stable/c/c02027b5742b5aa804ef08a4a9db433295533046	Patch

Impacted products

Vendor	Product	Version
linux	linux_kernel	*
linux	linux_kernel	*
linux	linux_kernel	*
linux	linux_kernel	5.13

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/x86/include/asm/kvm_para.h",
            "arch/x86/kernel/kvm.c",
            "arch/x86/kernel/kvmclock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "9084fe1b3572664ad276f427dce575f580c9799a",
              "status": "affected",
              "version": "1e977aa12dd4f80688b1f243762212e75c6d7fe8",
              "versionType": "git"
            },
            {
              "lessThan": "3b0becf8b1ecf642a9edaf4c9628ffc641e490d6",
              "status": "affected",
              "version": "1e977aa12dd4f80688b1f243762212e75c6d7fe8",
              "versionType": "git"
            },
            {
              "lessThan": "1df2dc09926f61319116c80ee85701df33577d70",
              "status": "affected",
              "version": "1e977aa12dd4f80688b1f243762212e75c6d7fe8",
              "versionType": "git"
            },
            {
              "lessThan": "c02027b5742b5aa804ef08a4a9db433295533046",
              "status": "affected",
              "version": "1e977aa12dd4f80688b1f243762212e75c6d7fe8",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "arch/x86/include/asm/kvm_para.h",
            "arch/x86/kernel/kvm.c",
            "arch/x86/kernel/kvmclock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.26"
            },
            {
              "lessThan": "2.6.26",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.125",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.43",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.12.*",
              "status": "unaffected",
              "version": "5.12.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F463D47B-F1A3-457B-87D0-92D3B3A033B0",
              "versionEndExcluding": "5.4.125",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B2136BD5-4F86-40C8-96C8-5C90A015490C",
              "versionEndExcluding": "5.10.43",
              "versionStartIncluding": "5.5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "27384800-AB48-4C08-891E-34B66F5FC4AA",
              "versionEndExcluding": "5.12.10",
              "versionStartIncluding": "5.11",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "0CBAD0FC-C281-4666-AB2F-F8E6E1165DF7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kvm: Disable kvmclock on all CPUs on shutdown\n\nCurrenly, we disable kvmclock from machine_shutdown() hook and this\nonly happens for boot CPU. We need to disable it for all CPUs to\nguard against memory corruption e.g. on restore from hibernate.\n\nNote, writing \u00270\u0027 to kvmclock MSR doesn\u0027t clear memory location, it\njust prevents hypervisor from updating the location so for the short\nwhile after write and while CPU is still alive, the clock remains usable\nand correct so we don\u0027t need to switch to some other clocksource."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: x86/kvm: deshabilite kvmclock en todas las CPU al apagar Actualmente, deshabilitamos kvmclock desde el enlace machine_shutdown() y esto solo sucede para la CPU de arranque. Necesitamos deshabilitarlo para todas las CPU para protegernos contra la corrupci\u00f3n de la memoria, por ejemplo, al restaurar desde la hibernaci\u00f3n. Tenga en cuenta que escribir \u00270\u0027 en kvmclock MSR no borra la ubicaci\u00f3n de la memoria, solo evita que el hipervisor actualice la ubicaci\u00f3n, por lo que durante un breve per\u00edodo despu\u00e9s de la escritura y mientras la CPU a\u00fan est\u00e1 activa, el reloj permanece utilizable y correcto, por lo que no lo necesitamos. para cambiar a alguna otra fuente de reloj."
    }
  ],
  "id": "CVE-2021-47110",
  "lastModified": "2026-06-17T04:16:30.913",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.2,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2021-47110",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-03-18T16:10:03.353776Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-03-15T21:15:06.530",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/1df2dc09926f61319116c80ee85701df33577d70"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/3b0becf8b1ecf642a9edaf4c9628ffc641e490d6"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/9084fe1b3572664ad276f427dce575f580c9799a"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/c02027b5742b5aa804ef08a4a9db433295533046"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/1df2dc09926f61319116c80ee85701df33577d70"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/3b0becf8b1ecf642a9edaf4c9628ffc641e490d6"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/9084fe1b3572664ad276f427dce575f580c9799a"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/c02027b5742b5aa804ef08a4a9db433295533046"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-459"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-HX76-CHVW-QR8X

Vulnerability from github – Published: 2024-03-15 21:30 – Updated: 2025-03-13 21:30

Details

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Disable kvmclock on all CPUs on shutdown

Currenly, we disable kvmclock from machine_shutdown() hook and this only happens for boot CPU. We need to disable it for all CPUs to guard against memory corruption e.g. on restore from hibernate.

Note, writing '0' to kvmclock MSR doesn't clear memory location, it just prevents hypervisor from updating the location so for the short while after write and while CPU is still alive, the clock remains usable and correct so we don't need to switch to some other clocksource.

Severity

7.1 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2021-47110"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-459"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-03-15T21:15:06Z",
    "severity": "HIGH"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kvm: Disable kvmclock on all CPUs on shutdown\n\nCurrenly, we disable kvmclock from machine_shutdown() hook and this\nonly happens for boot CPU. We need to disable it for all CPUs to\nguard against memory corruption e.g. on restore from hibernate.\n\nNote, writing \u00270\u0027 to kvmclock MSR doesn\u0027t clear memory location, it\njust prevents hypervisor from updating the location so for the short\nwhile after write and while CPU is still alive, the clock remains usable\nand correct so we don\u0027t need to switch to some other clocksource.",
  "id": "GHSA-hx76-chvw-qr8x",
  "modified": "2025-03-13T21:30:59Z",
  "published": "2024-03-15T21:30:43Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-47110"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/1df2dc09926f61319116c80ee85701df33577d70"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/3b0becf8b1ecf642a9edaf4c9628ffc641e490d6"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9084fe1b3572664ad276f427dce575f580c9799a"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c02027b5742b5aa804ef08a4a9db433295533046"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2021-47110

Vulnerability from gsd - Updated: 2024-03-05 06:03

Details

Aliases

CVE-2021-47110

JSON

To clipboard

{
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2021-47110"
      ],
      "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kvm: Disable kvmclock on all CPUs on shutdown\n\nCurrenly, we disable kvmclock from machine_shutdown() hook and this\nonly happens for boot CPU. We need to disable it for all CPUs to\nguard against memory corruption e.g. on restore from hibernate.\n\nNote, writing \u00270\u0027 to kvmclock MSR doesn\u0027t clear memory location, it\njust prevents hypervisor from updating the location so for the short\nwhile after write and while CPU is still alive, the clock remains usable\nand correct so we don\u0027t need to switch to some other clocksource.",
      "id": "GSD-2021-47110",
      "modified": "2024-03-05T06:03:55.142933Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@kernel.org",
        "ID": "CVE-2021-47110",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Linux",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "1da177e4c3f4",
                          "version_value": "9084fe1b3572"
                        },
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "affected",
                            "versions": [
                              {
                                "lessThanOrEqual": "5.4.*",
                                "status": "unaffected",
                                "version": "5.4.125",
                                "versionType": "custom"
                              },
                              {
                                "lessThanOrEqual": "5.10.*",
                                "status": "unaffected",
                                "version": "5.10.43",
                                "versionType": "custom"
                              },
                              {
                                "lessThanOrEqual": "5.12.*",
                                "status": "unaffected",
                                "version": "5.12.10",
                                "versionType": "custom"
                              },
                              {
                                "lessThanOrEqual": "*",
                                "status": "unaffected",
                                "version": "5.13",
                                "versionType": "original_commit_for_fix"
                              }
                            ]
                          }
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Linux"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kvm: Disable kvmclock on all CPUs on shutdown\n\nCurrenly, we disable kvmclock from machine_shutdown() hook and this\nonly happens for boot CPU. We need to disable it for all CPUs to\nguard against memory corruption e.g. on restore from hibernate.\n\nNote, writing \u00270\u0027 to kvmclock MSR doesn\u0027t clear memory location, it\njust prevents hypervisor from updating the location so for the short\nwhile after write and while CPU is still alive, the clock remains usable\nand correct so we don\u0027t need to switch to some other clocksource."
          }
        ]
      },
      "generator": {
        "engine": "bippy-8df59b4913de"
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://git.kernel.org/stable/c/9084fe1b3572664ad276f427dce575f580c9799a",
            "refsource": "MISC",
            "url": "https://git.kernel.org/stable/c/9084fe1b3572664ad276f427dce575f580c9799a"
          },
          {
            "name": "https://git.kernel.org/stable/c/3b0becf8b1ecf642a9edaf4c9628ffc641e490d6",
            "refsource": "MISC",
            "url": "https://git.kernel.org/stable/c/3b0becf8b1ecf642a9edaf4c9628ffc641e490d6"
          },
          {
            "name": "https://git.kernel.org/stable/c/1df2dc09926f61319116c80ee85701df33577d70",
            "refsource": "MISC",
            "url": "https://git.kernel.org/stable/c/1df2dc09926f61319116c80ee85701df33577d70"
          },
          {
            "name": "https://git.kernel.org/stable/c/c02027b5742b5aa804ef08a4a9db433295533046",
            "refsource": "MISC",
            "url": "https://git.kernel.org/stable/c/c02027b5742b5aa804ef08a4a9db433295533046"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kvm: Disable kvmclock on all CPUs on shutdown\n\nCurrenly, we disable kvmclock from machine_shutdown() hook and this\nonly happens for boot CPU. We need to disable it for all CPUs to\nguard against memory corruption e.g. on restore from hibernate.\n\nNote, writing \u00270\u0027 to kvmclock MSR doesn\u0027t clear memory location, it\njust prevents hypervisor from updating the location so for the short\nwhile after write and while CPU is still alive, the clock remains usable\nand correct so we don\u0027t need to switch to some other clocksource."
          }
        ],
        "id": "CVE-2021-47110",
        "lastModified": "2024-03-17T22:38:29.433",
        "metrics": {},
        "published": "2024-03-15T21:15:06.530",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/1df2dc09926f61319116c80ee85701df33577d70"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/3b0becf8b1ecf642a9edaf4c9628ffc641e490d6"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/9084fe1b3572664ad276f427dce575f580c9799a"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/c02027b5742b5aa804ef08a4a9db433295533046"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Awaiting Analysis"
      }
    }
  }
}

SUSE-SU-2024:1454-1

Vulnerability from csaf_suse - Published: 2024-04-26 15:11 - Updated: 2024-04-26 15:11

Summary

Security update for the Linux Kernel

Severity

Important

Scope

114 vulnerabilities in this advisory, including CVE-2021-47110.

CVE-2021-47110

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 93 products

Open the full advisory

SUSE-SU-2024:1465-1

Vulnerability from csaf_suse - Published: 2024-04-29 12:57 - Updated: 2024-04-29 12:57

Summary

Security update for the Linux Kernel

Severity

Important

Scope

145 vulnerabilities in this advisory, including CVE-2021-47110.

CVE-2021-47110

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 4 products

Open the full advisory

SUSE-SU-2024:1489-1

Vulnerability from csaf_suse - Published: 2024-05-03 07:36 - Updated: 2024-05-03 07:36

Summary

Security update for the Linux Kernel

Severity

Important

Scope

157 vulnerabilities in this advisory, including CVE-2021-47110.

CVE-2021-47110

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 133 products

Open the full advisory

SUSE-SU-2024:1643-1

Vulnerability from csaf_suse - Published: 2024-05-14 13:38 - Updated: 2024-05-14 13:38

Summary

Security update for the Linux Kernel

Severity

Important

Scope

201 vulnerabilities in this advisory, including CVE-2021-47110.

CVE-2021-47110

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 12 products

Open the full advisory

SUSE-SU-2024:1646-1

Vulnerability from csaf_suse - Published: 2024-05-14 14:30 - Updated: 2024-05-14 14:30

Summary

Security update for the Linux Kernel

Severity

Important

Scope

187 vulnerabilities in this advisory, including CVE-2021-47110.

CVE-2021-47110

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 12 products

Open the full advisory

SUSE-SU-2024:1870-1

Vulnerability from csaf_suse - Published: 2024-05-30 14:27 - Updated: 2024-05-30 14:27

Summary

Security update for the Linux Kernel

Severity

Important

Scope

193 vulnerabilities in this advisory, including CVE-2021-47110.

CVE-2021-47110

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 67 products

Open the full advisory

SUSE-SU-2026:1130-1

Vulnerability from csaf_suse - Published: 2026-03-27 15:47 - Updated: 2026-09-16 19:12

Summary

Security update for the Linux Kernel

Severity

Important

Scope

5 vulnerabilities in this advisory, including CVE-2021-47110.

CVE-2021-47110

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 15 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2021-47110 (GCVE-0-2021-47110)

Tags

Sightings

Nomenclature

Related by attack behaviour