PT-2021-4225 · Linux+8 · Linux Kernel+8
Bodong Zhao
·
Published
2021-03-26
·
Updated
2023-05-17
·
CVE-2021-31916
CVSS v2.0
6.8
Medium
| Vector | AV:L/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.12
Description
An out-of-bounds memory write flaw was found in the list devices function in the Multi-device driver module. This flaw allows an attacker with special user privilege, specifically CAP SYS ADMIN, to access out-of-bounds memory, potentially leading to a system crash or a leak of internal kernel information. The highest threat from this issue is to system availability.
Recommendations
For Linux kernel versions prior to 5.12, update to version 5.12 or later to resolve the issue.
As a temporary workaround, consider restricting the use of the CAP SYS ADMIN privilege to minimize the risk of exploitation.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu