PT-2021-8196 · Linux+2 · Linux Kernel+2
James Wang
+1
·
Published
2021-06-08
·
Updated
2024-07-03
·
CVE-2021-47274
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.19 LTS
Description
The issue is related to a memory corruption problem in the Linux kernel, specifically in the tracing subsystem. It causes severe kernel crashes due to memory corruption. The problem is due to an out-of-bound access in the ftrace buffer. A fix has been added to protect against trace data overflow, but it may not prevent the overflow entirely. The length check should also consider the size of entry->array[0] to prevent additional space occupation and risk of overflow.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Memory Corruption
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse