CVE-2021-42008
The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2021-10-05
- Last modified
- 2024-08-04
- Weaknesses
- CWE-787
Affected products
- Debian Linux (Debian)
- Linux Kernel (Linux)
- H300e Firmware (Netapp)
- H300s Firmware (Netapp)
- H410c Firmware (Netapp)
- H410s Firmware (Netapp)
- H500e Firmware (Netapp)
- H500s Firmware (Netapp)
- H700e Firmware (Netapp)
- H700s Firmware (Netapp)
- Solidfire Baseboard Management Controller Firmware (Netapp)
References
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.13
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19d1532a187669ce86d5a2696eb7275310070793
- https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html
- https://security.netapp.com/advisory/ntap-20211104-0002/
- https://www.youtube.com/watch?v=d5f9xLK8Vhw
