CVE-2021-47485: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
In the Linux kernel, the following vulnerability has been resolved:
IB/qib: Protect from buffer overflow in struct qibusersdmapkt fields
Overflowing either addrlimit or bytestogo can allow userspace to trigger a buffer overflow of kernel memory. Check for overflows in all the places doing math on user controlled buffers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47485?
CVE-2021-47485 is classified as a medium severity vulnerability due to the potential for user-triggered buffer overflow in kernel memory.
How do I fix CVE-2021-47485?
To mitigate CVE-2021-47485, update the Linux kernel to a version that includes the patch for this vulnerability.
What versions of the Linux kernel are affected by CVE-2021-47485?
CVE-2021-47485 affects multiple versions of the Linux kernel ranging from 2.6.35 to 5.15-rc7.
What impact does CVE-2021-47485 have on system security?
CVE-2021-47485 could allow a local user to exploit the vulnerability and potentially execute arbitrary code in kernel mode.
Is there a known exploit for CVE-2021-47485?
As of now, there are no publicly known exploits for CVE-2021-47485, but the vulnerability poses a risk if unpatched.