PT-2024-11279 · Linux+2 · Linux Kernel+2
Alexander Ullrich
+8
·
Published
2021-06-07
·
Updated
2026-03-14
·
CVE-2021-47275
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the bcache feature in the Linux kernel, specifically in the cache missing code path. A potential kernel panic can occur due to an oversized read request. The
cached dev cache miss() function is called when a cache miss range is matched in the internal B+ tree, and the sectors parameter is used to calculate the size of the read request. However, the current calculation may generate an oversized value of sectors, leading to two potential kernel panics: one caused by BUG ON() inside bch btree insert key() and another caused by BUG() inside biovec slab(). The oversized sectors parameter can trigger these panics by causing an overflow in the bkey size calculation.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linux Kernel
Suse