CVE-2021-47148CWE-787

CVE-2021-47148

High · published March 25, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
13.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-pf: fix a buffer overflow in otx2_set_rxfh_context()

This function is called from ethtool_set_rxfh() and "*rss_context"

comes from the user. Add some bounds checking to prevent memory

corruption.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.8th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-03-25T13:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 5.12, < 5.12.95.12.9
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
https://git.kernel.org/stable/c/389146bc6d2bbb20714d06624b74856320ce40f7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e5cc361e21648b75f935f9571d4003aaee480214 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/389146bc6d2bbb20714d06624b74856320ce40f7 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/e5cc361e21648b75f935f9571d4003aaee480214 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 25 MAR 09:07Z
    octeontx2-pf: fix a buffer overflow in otx2_set_rxfh_context()
    cvelistv5