PT-2024-9280 · Linux+3 · Linux Kernel+3

Brian Gix · Published 2024-06-20 · Updated 2024-12-04 · CVE-2021-47620

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a buffer overflow error in the Bluetooth component of the Linux kernel. It involves an out-of-bound read that was being performed at the end of a while loop, causing false positives to fill the journal. The fix involves adding a check to the beginning of the loop processing to prevent this issue. The vulnerability could potentially allow an attacker to cause a denial of service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2024-10968

CVE-2021-47620

OPENSUSE-SU-2024_2362-1

OPENSUSE-SU-2024_2372-1

OPENSUSE-SU-2024_2394-1

SUSE-SU-2024:2362-1

SUSE-SU-2024:2372-1

SUSE-SU-2024:2384-1

SUSE-SU-2024:2394-1

SUSE-SU-2024:2902-1

SUSE-SU-2024:2929-1

SUSE-SU-2024:2939-1

SUSE-SU-2024:3566-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1412

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb · Exploit
• https://ubuntu.com/security/CVE-2021-47620 · Vendor Advisory
• https://git.kernel.org/stable/c/899663be5e75dc0174dc8bda0b5e6826edf0b29a · Patch
• https://git.kernel.org/stable/c/8819f93cd4a443dfe547aa622b21f723757df3fb · Patch
• https://git.kernel.org/stable/c/835d3706852537bf92eb23eb8635b8dee0c0aa67 · Patch
• https://git.kernel.org/stable/c/5a539c08d743d9910631448da78af5e961664c0e · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2384-1 · Vendor Advisory
• https://git.kernel.org/stable/c/5c968affa804ba98c3c603f37ffea6fba618025e · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2929-1 · Vendor Advisory
• https://git.kernel.org/stable/c/305e92f525450f3e1b5f5c9dc7eadb152d66a082 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2394-1 · Vendor Advisory
• https://git.kernel.org/stable/c/7889b38a7f21ed19314f83194622b195d328465c · Patch
• https://git.kernel.org/stable/c/83d5196b65d1b29e27d7dd16a3b9b439fb1d2dba · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2939-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47620 · Vendor Advisory