by Kastro CVE-2021-47137
Linux Linux — net: lantiq: fix memory corruption in RX ring
Description · from the CVE record
In the Linux kernel, the following vulnerability has been resolved: net: lantiq: fix memory corruption in RX ring In a situation where memory allocation or dma mapping fails, an invalid address is programmed into the descriptor. This can lead to memory corruption. If the memory allocation fails, DMA should reuse the previous skb and mapping and drop the packet. This patch also increments rx drop counter.
Affected
ProductAffectedFixed inSource
Linuxfe1a56420cf2ec28c8eceef672b87de0bbe1a260 – < 8bb1077448d43a871ed667520763e3b9f9b7975d8bb1077448d43a871ed667520763e3b9f9b7975dCNA
Linuxfe1a56420cf2ec28c8eceef672b87de0bbe1a260 – < 5ac72351655f8b033a2935646f53b7465c9034185ac72351655f8b033a2935646f53b7465c903418CNA
Linuxfe1a56420cf2ec28c8eceef672b87de0bbe1a260 – < 46dd4abced3cb2c912916f4a5353e0927db0c4a246dd4abced3cb2c912916f4a5353e0927db0c4a2CNA
Linuxfe1a56420cf2ec28c8eceef672b87de0bbe1a260 – < c7718ee96dbc2f9c5fc3b578abdf296dd44b9c20c7718ee96dbc2f9c5fc3b578abdf296dd44b9c20CNA
Linux4.20–CNA
linux_kernelfe1a56420cf2 – < 8bb1077448d48bb1077448d4CISA-ADP
linux_kernelfe1a56420cf2 – < 5ac72351655f5ac72351655fCISA-ADP
linux_kernelfe1a56420cf2 – < 46dd4abced3c46dd4abced3cCISA-ADP
linux_kernelfe1a56420cf2 – < c7718ee96dbcc7718ee96dbcCISA-ADP
linux_kernel4.20–CISA-ADP
linux_kernel≤ 4.20–CISA-ADP
linux_kernel5.4.124 – 5.4*–CISA-ADP
Scores by source
Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADP7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial