Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Sai Prakash Ranjan

#39038of 53,633
7.1Total CVSS
Vulnerabilities · 1
PT-2024-11345
7.1
2021-06-14
Linux · Linux Kernel · CVE-2021-47346
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a global-out-of-bounds bug in the `tmc update etf buffer()` function. This bug occurs because the `barrier pkt` array is accessed past its size, resulting in a KASAN out-of-bounds error. The bug was introduced when a commit removed the trailing '0' from the `barrier pkt` array and updated the call sites to have proper checks for `barrier pkt` size before reading, but missed updating `tmc update etf buffer()`. The fix involves adding a check for `barrier pkt` size before accessing it, similar to what is done in `etb update buffer()`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.