Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Liangyan

Researcher fromAlibaba
#23321of 53,624
10Total CVSS
Vulnerabilities · 1
PT-2021-8196
10
2021-06-08
Linux · Linux Kernel · CVE-2021-47274
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.19 LTS **Description** The issue is related to a memory corruption problem in the Linux kernel, specifically in the tracing subsystem. It causes severe kernel crashes due to memory corruption. The problem is due to an out-of-bound access in the ftrace buffer. A fix has been added to protect against trace data overflow, but it may not prevent the overflow entirely. The length check should also consider the size of entry->array[0] to prevent additional space occupation and risk of overflow. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.