UBUNTU-CVE-2021-47485: Buffer Overflow

Q: What level of access is required to exploit this issue?

An attacker needs local access with low privileges. No user interaction is required.

Q: What could successful exploitation allow?

The severity vector rates confidentiality, integrity, and availability impact as high. The issue involves a kernel-memory buffer overflow triggered through user-controlled buffer calculations.

Q: Which Ubuntu kernel package families are listed as affected?

The listed software includes ubuntu/linux, ubuntu/linux-aws, ubuntu/linux-azure, ubuntu/linux-gcp, ubuntu/linux-fips, ubuntu/linux-aws-fips, ubuntu/linux-azure-fips, and ubuntu/linux-gcp-fips.

Published May 22, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved: IB/qib: Protect from buffer overflow in struct qibusersdmapkt fields Overflowing either addrlimit or bytestogo can allow userspace to trigger a buffer overflow of kernel memory. Check for overflows in all the places doing math on user controlled buffers.

Affected Software

119 affected componentsFixes available

ubuntu/linux-azure<4.15.0-1131.144~14.04.1

4.15.0-1131.144~14.04.1

ubuntu/linux*

ubuntu/linux-aws<4.4.0-1151.157

4.4.0-1151.157

ubuntu/linux-lts-xenial<4.4.0-277.311~14.04.1

4.4.0-277.311~14.04.1

ubuntu/linux<4.4.0-277.311

4.4.0-277.311

ubuntu/linux-aws<4.4.0-1189.204

4.4.0-1189.204

ubuntu/linux-aws-hwe<4.15.0-1120.128~16.04.1

4.15.0-1120.128~16.04.1

ubuntu/linux-azure<4.15.0-1131.144~16.04.1

4.15.0-1131.144~16.04.1

ubuntu/linux-gcp<4.15.0-1116.130~16.04.1

4.15.0-1116.130~16.04.1

ubuntu/linux-hwe<4.15.0-169.177~16.04.1

4.15.0-169.177~16.04.1

ubuntu/linux-kvm<4.4.0-1152.163

4.4.0-1152.163

ubuntu/linux-oracle<4.15.0-1087.95~16.04.1

4.15.0-1087.95~16.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-fips<4.4.0-1121.128

4.4.0-1121.128

ubuntu/linux-fips*

ubuntu/linux<4.15.0-169.177

4.15.0-169.177

ubuntu/linux-aws<4.15.0-1121.129

4.15.0-1121.129

ubuntu/linux-aws-5.4<5.4.0-1061.64~18.04.1

5.4.0-1061.64~18.04.1

ubuntu/linux-azure-4.15<4.15.0-1131.144

4.15.0-1131.144

ubuntu/linux-azure-5.4<5.4.0-1065.68~18.04.1

5.4.0-1065.68~18.04.1

ubuntu/linux-gcp-4.15<4.15.0-1116.130

4.15.0-1116.130

ubuntu/linux-gcp-5.4<5.4.0-1059.63~18.04.1

5.4.0-1059.63~18.04.1

ubuntu/linux-hwe-5.4<5.4.0-92.103~18.04.2

5.4.0-92.103~18.04.2

ubuntu/linux-kvm<4.15.0-1107.109

4.15.0-1107.109

ubuntu/linux-oracle<4.15.0-1087.95

4.15.0-1087.95

ubuntu/linux-oracle-5.4<5.4.0-1059.63~18.04.1

5.4.0-1059.63~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1048.53~18.04.1

5.4.0-1048.53~18.04.1

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-fips<4.15.0-2061.63

4.15.0-2061.63

ubuntu/linux-azure-fips<4.15.0-2043.47

4.15.0-2043.47

ubuntu/linux-fips<4.15.0-1078.87

4.15.0-1078.87

ubuntu/linux-gcp-fips<4.15.0-2026.28

4.15.0-2026.28

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-92.103

5.4.0-92.103

ubuntu/linux-aws<5.4.0-1061.64

5.4.0-1061.64

ubuntu/linux-azure<5.4.0-1065.68

5.4.0-1065.68

ubuntu/linux-bluefield<5.4.0-1023.26

5.4.0-1023.26

ubuntu/linux-gcp<5.4.0-1059.63

5.4.0-1059.63

ubuntu/linux-gkeop<5.4.0-1029.30

5.4.0-1029.30

ubuntu/linux-ibm<5.4.0-1010.11

5.4.0-1010.11

ubuntu/linux-kvm<5.4.0-1051.53

5.4.0-1051.53

ubuntu/linux-oracle<5.4.0-1059.63

5.4.0-1059.63

ubuntu/linux-raspi<5.4.0-1048.53

5.4.0-1048.53

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1069.73+fips2

5.4.0-1069.73+fips2

ubuntu/linux-azure-fips<5.4.0-1073.76+fips1

5.4.0-1073.76+fips1

ubuntu/linux-fips<5.4.0-1038.44

5.4.0-1038.44

ubuntu/linux-gcp-fips<5.4.0-1067.71~20.04.1

5.4.0-1067.71~20.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-nvidia-6.2*

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-raspi-realtime*

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1131.144~14.04.1
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1151.157
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-277.311~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-277.311
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1189.204
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1120.128~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1131.144~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1116.130~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-169.177~16.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.4.0-1152.163
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1087.95~16.04.1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.4.0-1121.128
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-169.177
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1121.129
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1061.64~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1131.144
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1065.68~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1116.130
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1059.63~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-92.103~18.04.2
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1107.109
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1087.95
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1059.63~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1048.53~18.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2061.63
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2043.47
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1078.87
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2026.28
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-92.103
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1061.64
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1065.68
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1023.26
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1059.63
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.4.0-1029.30
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1010.11
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1051.53
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1059.63
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1048.53
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1069.73+fips2
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1073.76+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1038.44
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1067.71~20.04.1
Compensating control
Check for integer overflows in all calculations involving user-controlled buffers, including the addrlimit and bytes_togo fields of struct qib_user_sdma_pkt, to prevent kernel-memory buffer overflows.

Event History

May 22, 2024

CVE Published

via OSV·09:15 AM

Data Sourced

via OSV·09:15 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What level of access is required to exploit this issue?

An attacker needs local access with low privileges. No user interaction is required.

What could successful exploitation allow?

The severity vector rates confidentiality, integrity, and availability impact as high. The issue involves a kernel-memory buffer overflow triggered through user-controlled buffer calculations.

Which Ubuntu kernel package families are listed as affected?

The listed software includes ubuntu/linux, ubuntu/linux-aws, ubuntu/linux-azure, ubuntu/linux-gcp, ubuntu/linux-fips, ubuntu/linux-aws-fips, ubuntu/linux-azure-fips, and ubuntu/linux-gcp-fips.

UBUNTU-CVE-2021-47485: Buffer Overflow

Affected Software

Remediation

Event History

Frequently Asked Questions

What level of access is required to exploit this issue?

What could successful exploitation allow?

Which Ubuntu kernel package families are listed as affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access is required to exploit this issue?

What could successful exploitation allow?

Which Ubuntu kernel package families are listed as affected?