PT-2024-11345 · Linux+1 · Linux Kernel+1
Sai Prakash Ranjan
·
Published
2021-06-14
·
Updated
2024-06-28
·
CVE-2021-47346
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a global-out-of-bounds bug in the
tmc update etf buffer() function. This bug occurs because the barrier pkt array is accessed past its size, resulting in a KASAN out-of-bounds error. The bug was introduced when a commit removed the trailing '0' from the barrier pkt array and updated the call sites to have proper checks for barrier pkt size before reading, but missed updating tmc update etf buffer(). The fix involves adding a check for barrier pkt size before accessing it, similar to what is done in etb update buffer().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel