CVE-2021-47485CWE-120

CVE-2021-47485

High · published May 22, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields

Overflowing either addrlimit or bytes_togo can allow userspace to trigger

a buffer overflow of kernel memory. Check for overflows in all the places

doing math on user controlled buffers.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.9th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2024-05-22T13:15Z
Affected products (14)
ProductVersionsFixed in
linux/linux_kernel≥ 2.6.35, < 4.4.2924.4.292
linux/linux_kernel≥ 4.5, < 4.9.2904.9.290
linux/linux_kernel≥ 4.10, < 4.14.2554.14.255
linux/linux_kernel≥ 4.15, < 4.19.2164.19.216
linux/linux_kernel≥ 4.20, < 5.4.1575.4.157
linux/linux_kernel≥ 5.5, < 5.10.775.10.77
linux/linux_kernel≥ 5.11, < 5.14.165.14.16
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (16)
https://git.kernel.org/stable/c/0d4395477741608d123dad51def9fe50b7ebe952 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0f8cdfff06829a0b0348b6debc29ff6a61967724 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3f57c3f67fd93b4da86aeffea1ca32c484d054ad · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/60833707b968d5ae02a75edb7886dcd4a957cf0d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/73d2892148aa4397a885b4f4afcfc5b27a325c42 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bda41654b6e0c125a624ca35d6d20beb8015b5d0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c3e17e58f571f34c51aeb17274ed02c2ed5cf780 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d39bf40e55e666b5905fdbd46a0dced030ce87be · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0d4395477741608d123dad51def9fe50b7ebe952 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/0f8cdfff06829a0b0348b6debc29ff6a61967724 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/3f57c3f67fd93b4da86aeffea1ca32c484d054ad · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/60833707b968d5ae02a75edb7886dcd4a957cf0d · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/73d2892148aa4397a885b4f4afcfc5b27a325c42 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/bda41654b6e0c125a624ca35d6d20beb8015b5d0 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/c3e17e58f571f34c51aeb17274ed02c2ed5cf780 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/d39bf40e55e666b5905fdbd46a0dced030ce87be · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 22 MAY 08:19Z
    IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
    cvelistv5