CVE-2021-43056

What it actually does

A bug in the KVM hypervisor real-mode handlers for PowerPC Book3S HV allows a guest to supply malformed SRR1 register values that trigger a host kernel crash on Power8 systems.

Why it matters to the business

A single malicious or compromised virtual machine can bring down the entire physical server, halting all workloads and requiring manual recovery of the host.

How an attack unfolds

An attacker who already controls a KVM guest on a vulnerable Power8 host issues hypercalls or register manipulations that reach the flawed SRR1 handling code in book3s_hv_rmhandlers.S, causing an unhandled exception and host-wide kernel panic.

How to fix it

Upgrade the Linux kernel to version 5.14.15 or newer on all PowerPC systems; apply the corresponding Fedora and distribution security updates that contain the fix for arch/powerpc/kvm/book3s_hv_rmhandlers.S.

How to confirm the fix worked

Run 'uname -r' to confirm kernel version 5.14.15 or later; verify the patched version of book3s_hv_rmhandlers.S is present in the running kernel source or binary.

Typical attack path

1. Obtain code execution inside a KVM guest
2. Trigger the vulnerable SRR1 path via crafted hypervisor calls
3. Force the host kernel to panic and reboot

How to detect it

Search host kernel logs and crash dumps for PowerPC KVM exceptions referencing SRR1 or book3s_hv_rmhandlers; correlate guest activity spikes with unexpected host panics.

• book3s_hv_rmhandlers.S
• SRR1 register
• KVM Power8 host panic

What your security team should do

• Apply kernel updates to 5.14.15+ on all PowerPC KVM hosts immediately
• Isolate or restrict untrusted guests until patching is complete
• Review and test PowerPC systems for this regression before production deployment