High · published October 11, 2021
An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6. Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs because a certain comparison uses values that are not memory sizes.
| Product | Versions | Fixed in |
|---|---|---|
| netapp/cloud_backup | all versions | — |
| linux/linux_kernel | ≥ 4.12, < 4.14.247 | 4.14.247 |
| linux/linux_kernel | ≥ 4.15, < 4.19.207 | 4.19.207 |
| linux/linux_kernel | ≥ 4.20, < 5.4.148 | 5.4.148 |
| linux/linux_kernel | ≥ 5.5, < 5.10.67 | 5.10.67 |
| linux/linux_kernel | ≥ 5.11, < 5.13.19 | 5.13.19 |
| linux/linux_kernel | ≥ 5.14, < 5.14.6 | 5.14.6 |
| netapp/h300s_firmware | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |
| netapp/h300e_firmware | all versions | — |
| netapp/h500e_firmware | all versions | — |
| netapp/h700e_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |
| netapp/h410c_firmware | all versions | — |
| netapp/solidfire_baseboard_management_controller_firmware | all versions | — |