PT-2016-3339 · Linux+3 · Linux Kernel+3

Dmitry Vyukov · Published 2016-02-01 · Updated 2021-05-12 · CVE-2021-20261

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Medium

Base vector

AV:L/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition was found in the Linux kernel's implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact that the default permissions on the floppy device (/dev/fd0) are restricted to root. If the permissions on the device have changed, the impact changes greatly. In the default configuration, root (or equivalent) permissions are required to attack this flaw. The issue is related to the use of a shared resource with incorrect synchronization, which can be exploited to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2016-1262

ALT-PU-2017-1330

BDU:2021-01631

CVE-2021-20261

SUSE-SU-2021:14724-1

SUSE-SU-2021_14724-1

USN-4904-1

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

References · 56

• https://ubuntu.com/security/CVE-2021-28038 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16644 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5967 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-1350 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4904-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20261 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-20261 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4904-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-16232 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-20261 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-13095 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-26930 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-20261 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-26931 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-16231 · Vendor Advisory