We found results for “”
WS-2021-0517
Good to know:
Date: December 1, 2021
In Linux/Kernel is vulnerable to user buffer by properly using clear_user() in fs/proc/vmcore.c. The fix versions are v4.4.294, v4.9.292, v4.14.258, v4.19.219, v5.4.163, v5.10.83, v5.15.6, v5.16-rc3.
Language: C
Severity Score
Severity Score
Weakness Type (CWE)
Stack-based Buffer Overflow
CWE-121Top Fix
Upgrade Version
Upgrade to version Linux/Kernel - v4.4.294, v4.9.292, v4.14.258, v4.19.219, v5.4.163, v5.10.83, v5.15.6, v5.16-rc3
CVSS v3.1
Base Score: |
|
---|---|
Attack Vector (AV): | LOCAL |
Attack Complexity (AC): | LOW |
Privileges Required (PR): | NONE |
User Interaction (UI): | NONE |
Scope (S): | UNCHANGED |
Confidentiality (C): | NONE |
Integrity (I): | NONE |
Availability (A): | HIGH |