CVE-2021-37576: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.

Affected products

• Fedoraproject Fedora: version 33 only; version 34 only
• Linux Linux Kernel: from 3.10, before 4.4.277 (fixed in 4.4.277); from 4.5, before 4.9.277 (fixed in 4.9.277); from 4.10, before 4.14.241 (fixed in 4.14.241); from 4.15, before 4.19.199 (fixed in 4.19.199); from 4.20, before 5.4.136 (fixed in 5.4.136); from 5.5, before 5.10.54 (fixed in 5.10.54); …

Published 2021-07-26. Last modified 2026-06-17.