Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — KVM: arm64: Fix host stage-2 PGD refcount
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U N N H 5.5 .0021 11.0 —
AFFECTED
Product Versions Fixed
Linux 1025c8c0c6accfcbdc8f52ca1940160f65cd87d6 – —
Linux 5.13 – 5.14.15
TIMELINE
May 21 Reserved by Linux
May 22 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2021-47450 (Linux). CVSS 8.8 → 5.5 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Fix host stage-2 PGD refcount
The KVM page-table library refcounts the pages of concatenated stage-2
PGDs individually. However, when running KVM in protected mode, the
host's stage-2 PGD is currently managed by EL2 as a single high-order
compound page, which can cause the refcount of the tail pages to reach 0
when they shouldn't, hence corrupting the page-table.
Fix this by introducing a new hyp_split_page() helper in the EL2 page
allocator (matching the kernel's split_page() function), and make use of
it from host_s2_zalloc_pages_exact().
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| May 21, 2024 | Reserved | Reserved by Linux |
| May 22, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2021-47450 (Linux). CVSS 8.8 → 5.5 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | 1025c8c0c6accfcbdc8f52ca1940160f65cd87d6 | — |
| Linux | Linux | — | 5.13 | 5.14.15 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2021-47450 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.