CVE-2021-47485: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
First published: Wed May 22 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields Overflowing either addrlimit or bytes_togo can allow userspace to trigger a buffer overflow of kernel memory. Check for overflows in all the places doing math on user controlled buffers.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux kernel | >=2.6.35<4.4.292 | |
| Linux kernel | >=4.5<4.9.290 | |
| Linux kernel | >=4.10<4.14.255 | |
| Linux kernel | >=4.15<4.19.216 | |
| Linux kernel | >=4.20<5.4.157 | |
| Linux kernel | >=5.5<5.10.77 | |
| Linux kernel | >=5.11<5.14.16 | |
| Linux kernel | =5.15-rc1 | |
| Linux kernel | =5.15-rc2 | |
| Linux kernel | =5.15-rc3 | |
| Linux kernel | =5.15-rc4 | |
| Linux kernel | =5.15-rc5 | |
| Linux kernel | =5.15-rc6 | |
| Linux kernel | =5.15-rc7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/bda41654b6e0c125a624ca35d6d20beb8015b5d0
- https://git.kernel.org/stable/c/3f57c3f67fd93b4da86aeffea1ca32c484d054ad
- https://git.kernel.org/stable/c/60833707b968d5ae02a75edb7886dcd4a957cf0d
- https://git.kernel.org/stable/c/73d2892148aa4397a885b4f4afcfc5b27a325c42
- https://git.kernel.org/stable/c/0f8cdfff06829a0b0348b6debc29ff6a61967724
- https://git.kernel.org/stable/c/c3e17e58f571f34c51aeb17274ed02c2ed5cf780
- https://git.kernel.org/stable/c/0d4395477741608d123dad51def9fe50b7ebe952
- https://git.kernel.org/stable/c/d39bf40e55e666b5905fdbd46a0dced030ce87be
Frequently Asked Questions
What is the severity of CVE-2021-47485?
CVE-2021-47485 is classified as a medium severity vulnerability due to the potential for user-triggered buffer overflow in kernel memory.
How do I fix CVE-2021-47485?
To mitigate CVE-2021-47485, update the Linux kernel to a version that includes the patch for this vulnerability.
What versions of the Linux kernel are affected by CVE-2021-47485?
CVE-2021-47485 affects multiple versions of the Linux kernel ranging from 2.6.35 to 5.15-rc7.
What impact does CVE-2021-47485 have on system security?
CVE-2021-47485 could allow a local user to exploit the vulnerability and potentially execute arbitrary code in kernel mode.
Is there a known exploit for CVE-2021-47485?
As of now, there are no publicly known exploits for CVE-2021-47485, but the vulnerability poses a risk if unpatched.
- agent/title
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/remedy
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/linux
- canonical/linux kernel
- version/linux kernel/2.6.35
- version/linux kernel/4.5
- version/linux kernel/4.10
- version/linux kernel/4.15
- version/linux kernel/4.20
- version/linux kernel/5.5
- version/linux kernel/5.11
- version/linux kernel/5.15-rc1
- version/linux kernel/5.15-rc2
- version/linux kernel/5.15-rc3
- version/linux kernel/5.15-rc4
- version/linux kernel/5.15-rc5
- version/linux kernel/5.15-rc6
- version/linux kernel/5.15-rc7