CVE-2021-20261: Race Condition
First published: Wed Feb 24 2021(Updated: )
A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact that the default permissions on the floppy device (/dev/fd0) are restricted to root. If the permissions on the device have changed the impact changes greatly. In the default configuration root (or equivalent) permissions are required to attack this flaw.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | <4.5 | |
| Linux Linux kernel | =4.5 | |
| Linux Linux kernel | =4.5-rc1 | |
| Linux Linux kernel | =4.5-rc2 | |
| Linux Linux kernel | =4.5-rc3 | |
| Linux Linux kernel | =4.5-rc4 | |
| Redhat Enterprise Linux | =7.0 | |
| redhat/Linux kernel | <4.5 | 4.5 |
| debian/linux | 5.10.223-1 5.10.226-1 6.1.115-1 6.1.119-1 6.11.10-1 6.12.5-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=1932150
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a0c80efe5956ccce9fe7ae5c78542578c07bc20a
- https://launchpad.net/bugs/cve/CVE-2021-20261
- https://access.redhat.com/solutions/41278
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1937601
- https://git.kernel.org/linus/a0c80efe5956ccce9fe7ae5c78542578c07bc20a
- https://security-tracker.debian.org/tracker/CVE-2021-20261
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20261
- https://nvd.nist.gov/vuln/detail/CVE-2021-20261
- https://ubuntu.com/security/CVE-2021-20261
- collector/nvd-index
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- agent/author
- agent/severity
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2021-20261
- agent/software-canonical-lookup
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/remedy
- collector/usn-cve
- source/Ubuntu
- agent/description
- agent/tags
- agent/event
- collector/nvd-cve
- source/NVD
- agent/last-modified-date
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- agent/trending
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/4.5
- version/linux linux kernel/4.5-rc1
- version/linux linux kernel/4.5-rc2
- version/linux linux kernel/4.5-rc3
- version/linux linux kernel/4.5-rc4
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/7.0
- package-manager/redhat
- package-manager/debian