Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Sanjay Kumar

Researcher fromIntel
#45046of 53,633
5.5Total CVSS
Vulnerabilities · 1
PT-2021-8022
5.5
2021-04-12
Linux · Linux Kernel · CVE-2021-46920
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to the dmaengine component, specifically the idxd driver, where the current code blindly writes over the SWERR and OVERFLOW bits. This can cause the driver to clobber the OVERFLOW bit that comes after the register is read, potentially allowing an attacker to disclose confidential information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.