PT-2021-8183 · Linux+2 · Linux Kernel+2

Dan Carpenter · Published 2021-12-08 · Updated 2024-12-02 · CVE-2021-47605

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a memory corruption vulnerability in the vduse dev ioctl() function. The "config.offset" comes from the user and needs to be checked to prevent it from being out of bounds. The config.offset and dev->config size variables are both type u32, and if the offset is out of bounds, the subtraction results in a very high u32 value, leading to memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2024-09779

CVE-2021-47605

OPENSUSE-SU-2024_2372-1

OPENSUSE-SU-2024_2394-1

SUSE-SU-2024:2372-1

SUSE-SU-2024:2394-1

SUSE-SU-2024:2939-1

Affected Products

Linux Kernel

Red Os

Suse

References · 1178

• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://git.kernel.org/stable/c/ff9f9c6e74848170fcb45c8403c80d661484c8c9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47605 · Security Note
• https://git.kernel.org/stable/c/e6c67560b4341914bec32ec536e931c22062af65 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2939-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-47605 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2394-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47605 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47605 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47605 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47605 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-09779 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2372-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47605 · Security Note
• https://bugzilla.suse.com/1228565 · Note