CVE-2021-20263

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

A flaw was found in the virtio-fs shared file system daemon (virtiofsd) of QEMU. The new 'xattrmap' option may cause the 'security.capability' xattr in the guest to not drop on file write, potentially leading to a modified, privileged executable in the guest. In rare circumstances, this flaw could be used by a malicious user to elevate their privileges within the guest.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-281

Affected software

Vendor	Product	Versions
n/a	QEMU	qemu 5.2.50

References

https://bugzilla.redhat.com/show_bug.cgi?id=1933668Issue Tracking, Patch, Third Party Advisory
https://security.gentoo.org/glsa/202208-27Third Party Advisory
https://security.netapp.com/advisory/ntap-20210507-0002/Third Party Advisory
https://www.openwall.com/lists/oss-security/2021/03/08/1Mailing List, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1933668Issue Tracking, Patch, Third Party Advisory
https://security.gentoo.org/glsa/202208-27Third Party Advisory
https://security.netapp.com/advisory/ntap-20210507-0002/Third Party Advisory
https://www.openwall.com/lists/oss-security/2021/03/08/1Mailing List, Patch, Third Party Advisory

Timeline

Published: Mar 9, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-202647.8An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw allows an attacker w CVE-2021-202655.5A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. T CVE-2021-202664.9A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds rea CVE-2021-202677.1A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a se CVE-2021-202687.8An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF scr CVE-2021-202695.5A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and l CVE-2021-20278.2Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are CVE-2021-202707.5An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standa CVE-2021-202717.0A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim CVE-2021-202727.5A flaw was found in privoxy before 3.0.32. An assertion failure could be triggered with a crafted CGI request leading to server crash.CVE-2021-202737.5A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off.CVE-2021-202747.5A flaw was found in privoxy before 3.0.32. A crash may occur due a NULL-pointer dereference when the socks server misbehaves.