CVE catalog

CVE-2021-35540

UBUNTU-CVE-2021-35540

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.39% · Oct 25, 2026

This update for virtualbox fixes the following issues: Version bump to 6.1.28 (released October 19 2021 by Oracle) This is a maintenance release. The following items were fixed and/or added: - VMM: Fixed guru meditation while booting nested-guests accessing debug registers under certain conditions - UI: Bug fixes for touchpad-based scrolling - VMSVGA: Fixed VM black screen issue on first resize after restoring from saved state (bug #20067) - VMSVGA: Fixed display corruption on Linux Mint (bug #20513) - Storage: Fixed a possible write error under certain circumstances when using VHD images (bug #20512) - Network: Multiple updates in virtio-net device support - Network: Disconnecting cable in saved VM state now is handled properly by virtio-net - Network: More administrative control over network ranges, see user manual - NAT: Fixed not rejecting TFTP requests with absolute pathnames (bug #20589) - Audio: Fixed VM session aborting after PC hibernation (bug #20516) - Audio: Fixed setting the line-in volume of the HDA emulation on modern Linux guests - Audio: Fixed resuming playback of the AC'97 emulation while a snapshot has been taken - API: Added bindings support for Python 3.9 (bug #20252) - API: Fixed rare hang of VM when changing settings at runtime - Linux host: Improved kernel modules installation detection which prevents unnecessary modules rebuild - Host Services: Shared Clipboard: Prevent guest clipboard reset when clipboard sharing is disabled (bug #20487) - Host Services: Shared Clipboard over VRDP: Fixed to continue working when guest service reconnects to host (bug #20366) - Host Services: Shared Clipboard over VRDP: Fixed preventing remote RDP client to hang when guest has no clipboard data to report - Linux Host and Guest: Introduced initial support for kernels 5.14 and 5.15 - Linux Host and Guest: Introduced initial support for RHEL 8.5 kernel - Windows Guest: Introduced Windows 11 guest support, including unattended installation - Fixes CVE-2021-35538, CVE-2021-35545, CVE-2021-35540, CVE-2021-35542, and CVE-2021-2475 (boo#1191869) - Use kernel_module_directory macro for kernel modules (boo#1191526) - Finish UsrMerge for VirtualBox components (boo#1191104).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Opensusevirtualboxleap 15.36.1.28-lp153.2.12.1fixed
Opensusevirtualbox-kmpleap 15.36.1.28-lp153.2.12.1fixed
Ubuntuvirtualbox16.045.0.4-dfsg-2vulnerable
Ubuntuvirtualbox16.045.0.8-dfsg-1vulnerable
Ubuntuvirtualbox16.045.0.10-dfsg-1vulnerable
Ubuntuvirtualbox16.045.0.10-dfsg-2vulnerable
Ubuntuvirtualbox16.045.0.10-dfsg-3vulnerable
Ubuntuvirtualbox16.045.0.10-dfsg-4vulnerable
Ubuntuvirtualbox16.045.0.10-dfsg-5vulnerable
Ubuntuvirtualbox16.045.0.10-dfsg-6vulnerable
Ubuntuvirtualbox16.045.0.10-dfsg-7vulnerable
Ubuntuvirtualbox16.045.0.12-dfsg-1vulnerable
Ubuntuvirtualbox16.045.0.12-dfsg-2vulnerable
Ubuntuvirtualbox16.045.0.14-dfsg-1vulnerable
Ubuntuvirtualbox16.045.0.14-dfsg-2vulnerable
Ubuntuvirtualbox16.045.0.14-dfsg-2build1vulnerable
Ubuntuvirtualbox16.045.0.16-dfsg-2vulnerable
Ubuntuvirtualbox16.045.0.16-dfsg-3vulnerable
Ubuntuvirtualbox16.045.0.18-dfsg-1vulnerable
Ubuntuvirtualbox16.045.0.18-dfsg-1ubuntu1vulnerable
Ubuntuvirtualbox16.045.0.18-dfsg-2vulnerable
Ubuntuvirtualbox16.045.0.18-dfsg-2build1vulnerable
Ubuntuvirtualbox16.045.0.18-dfsg-2ubuntu1vulnerable
Ubuntuvirtualbox16.045.0.24-dfsg-0ubuntu1.16.04.1vulnerable
Ubuntuvirtualbox16.045.0.32-dfsg-0ubuntu1.16.04.2vulnerable
Ubuntuvirtualbox16.045.0.36-dfsg-0ubuntu1.16.04.2vulnerable
Ubuntuvirtualbox16.045.0.40-dfsg-0ubuntu1.16.04.1vulnerable
Ubuntuvirtualbox16.045.0.40-dfsg-0ubuntu1.16.04.2vulnerable
Ubuntuvirtualbox16.045.1.34-dfsg-0ubuntu1.16.04.2vulnerable
Ubuntuvirtualbox16.045.1.38-dfsg-0ubuntu1.16.04.1vulnerable
Ubuntuvirtualbox16.045.1.38-dfsg-0ubuntu1.16.04.2vulnerable
Ubuntuvirtualbox16.045.1.38-dfsg-0ubuntu1.16.04.3vulnerable
Ubuntuvirtualbox18.045.1.30-dfsg-1vulnerable
Ubuntuvirtualbox18.045.2.0-dfsg-1build2vulnerable
Ubuntuvirtualbox18.045.2.0-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.0-dfsg-4vulnerable
Ubuntuvirtualbox18.045.2.0-dfsg-5vulnerable
Ubuntuvirtualbox18.045.2.2-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.2-dfsg-3~build1vulnerable
Ubuntuvirtualbox18.045.2.2-dfsg-3vulnerable
Ubuntuvirtualbox18.045.2.4-dfsg-1vulnerable
Ubuntuvirtualbox18.045.2.4-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.6-dfsg-1vulnerable
Ubuntuvirtualbox18.045.2.6-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.6-dfsg-3vulnerable
Ubuntuvirtualbox18.045.2.6-dfsg-3build1vulnerable
Ubuntuvirtualbox18.045.2.6-dfsg-5vulnerable
Ubuntuvirtualbox18.045.2.8-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.8-dfsg-3vulnerable
Ubuntuvirtualbox18.045.2.8-dfsg-5vulnerable
Ubuntuvirtualbox18.045.2.8-dfsg-6vulnerable
Ubuntuvirtualbox18.045.2.8-dfsg-7vulnerable
Ubuntuvirtualbox18.045.2.10-dfsg-1vulnerable
Ubuntuvirtualbox18.045.2.10-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.10-dfsg-5vulnerable
Ubuntuvirtualbox18.045.2.10-dfsg-6vulnerable
Ubuntuvirtualbox18.045.2.10-dfsg-6ubuntu18.04.1vulnerable
Ubuntuvirtualbox18.045.2.18-dfsg-2~ubuntu18.04.1vulnerable
Ubuntuvirtualbox18.045.2.18-dfsg-2~ubuntu18.04.3vulnerable
Ubuntuvirtualbox18.045.2.18-dfsg-2~ubuntu18.04.5vulnerable
Ubuntuvirtualbox18.045.2.32-dfsg-0~ubuntu18.04.1vulnerable
Ubuntuvirtualbox18.045.2.34-dfsg-0~ubuntu18.04.1vulnerable
Ubuntuvirtualbox18.045.2.42-dfsg-0~ubuntu1.18.04.1vulnerable
Ubuntuvirtualbox20.046.0.14-dfsg-1vulnerable
Ubuntuvirtualbox20.046.0.14-dfsg-2~build1vulnerable
Ubuntuvirtualbox20.046.0.14-dfsg-2vulnerable
Ubuntuvirtualbox20.046.1.0-dfsg-3build1vulnerable
Ubuntuvirtualbox20.046.1.0-dfsg-3build2vulnerable
Ubuntuvirtualbox20.046.1.2-dfsg-1vulnerable
Ubuntuvirtualbox20.046.1.2-dfsg-1build1vulnerable
Ubuntuvirtualbox20.046.1.4-dfsg-1vulnerable
Ubuntuvirtualbox20.046.1.4-dfsg-2~build1vulnerable
Ubuntuvirtualbox20.046.1.4-dfsg-2vulnerable
Ubuntuvirtualbox20.046.1.4-dfsg-4vulnerable
Ubuntuvirtualbox20.046.1.6-dfsg-1vulnerable
Ubuntuvirtualbox20.046.1.10-dfsg-1~ubuntu1.20.04.1vulnerable
Ubuntuvirtualbox20.046.1.16-dfsg-6~ubuntu1.20.04.1vulnerable
Ubuntuvirtualbox20.046.1.16-dfsg-6~ubuntu1.20.04.2vulnerable
Ubuntuvirtualbox20.046.1.22-dfsg-2~ubuntu1.20.04.1vulnerable
Ubuntuvirtualbox20.046.1.26-dfsg-3~ubuntu1.20.04.1vulnerable
Ubuntuvirtualbox20.046.1.26-dfsg-3~ubuntu1.20.04.2vulnerable
Ubuntuvirtualbox20.046.1.32-dfsg-1~ubuntu1.20.04.1vulnerable
Ubuntuvirtualbox20.046.1.34-dfsg-3~ubuntu1.20.04.1vulnerable
Ubuntuvirtualbox20.046.1.38-dfsg-3~ubuntu1.20.04.1vulnerable
Ubuntuvirtualbox20.046.1.48-dfsg-1~ubuntu1.20.04.1vulnerable
Ubuntuvirtualbox20.046.1.50-dfsg-1~ubuntu1.20.04.1vulnerable
Ubuntuvirtualbox22.046.1.26-dfsg-4vulnerable
Ubuntuvirtualbox22.046.1.28-dfsg-1vulnerable
Ubuntuvirtualbox22.046.1.30-dfsg-1vulnerable
Ubuntuvirtualbox22.046.1.32-dfsg-1vulnerable
Ubuntuvirtualbox22.046.1.32-dfsg-1build1vulnerable
Ubuntuvirtualbox22.046.1.34-dfsg-3~ubuntu1.22.04.1vulnerable
Ubuntuvirtualbox22.046.1.38-dfsg-3~ubuntu1.22.04.1vulnerable
Ubuntuvirtualbox22.046.1.48-dfsg-1~ubuntu1.22.04.1vulnerable
Ubuntuvirtualbox22.046.1.50-dfsg-1~ubuntu1.22.04.1vulnerable
Ubuntuvirtualbox22.046.1.50-dfsg-1~ubuntu1.22.04.3vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Opensusevirtualboxrpmleap 15.36.1.28-lp153.2.12.1Not reportedOPENSUSE-SU-2021:1393-1Not reported
Opensusevirtualbox-kmprpmleap 15.36.1.28-lp153.2.12.1Not reportedOPENSUSE-SU-2021:1393-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References