PT-2024-11499 · Linux+3 · Linux Kernel+3
Dan Carpenter
·
Published
2021-12-08
·
Updated
2024-12-02
·
CVE-2021-47604
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the
vduse function in the Linux kernel, specifically with the get config() function. It checks the len variable but not the offset variable, which could result in an out of bounds read if offset > dev->config size. The problem arises because both variables are unsigned, and the subtraction dev->config size - offset would result in a very high unsigned value. The vhost vdpa config validate() function is supposed to validate len and offset, but the code's safety is still a concern. This vulnerability may allow an attacker to cause a denial of service.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse