PT-2016-3339 · Linux+3 · Linux Kernel+3

Dmitry Vyukov · Publicado 2016-02-01 · Atualizado 2021-05-12 · CVE-2021-20261

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Média

Vetor base

AV:L/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition was found in the Linux kernel's implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact that the default permissions on the floppy device (/dev/fd0) are restricted to root. If the permissions on the device have changed, the impact changes greatly. In the default configuration, root (or equivalent) permissions are required to attack this flaw. The issue is related to the use of a shared resource with incorrect synchronization, which can be exploited to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

ALT-PU-2016-1262

ALT-PU-2017-1330

BDU:2021-01631

CVE-2021-20261

SUSE-SU-2021:14724-1

SUSE-SU-2021_14724-1

USN-4904-1

Produtos afetados

Alt Linux

Linux Kernel

Suse

Ubuntu

Referências · 56

• https://ubuntu.com/security/CVE-2021-28038 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-16644 · Aviso do Fabricante
• https://bugzilla.suse.com/1056134 · Nota
• https://bugzilla.suse.com/1184194 · Nota
• https://ubuntu.com/security/CVE-2017-5967 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-1350 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-4904-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2021-20261 · Nota
• https://suse.com/security/cve/CVE-2021-27364 · Nota
• https://bugzilla.suse.com/1184198 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2021-20261 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-20261 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2020-36322 · Nota
• https://ubuntu.com/security/notices/USN-4904-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1184393 · Nota