SECUFOCUSNOW
Home›CVE index›CVE-2021-47485
Review reviewHigh

CVE-2021-47485

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields Overflowing either addrlimit or bytes_togo can allow userspace to trigger a buffer overflow of kernel memory. Check for overflows in all the places doing math on user controlled buffers.

CVSS
7.8
EPSS
0.24%
14.7% percentile
CISA KEV
Not listed
Published
2024.05.22
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.24%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields Overflowing either addrlimit or bytes_togo can allow userspace to trigger a buffer overflow of kernel memory. Check for overflows in all the places doing math on user controlled buffers.

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= f931551bafe1f10ded7f5282e2aa162c267a2e5d < bda41654b6e0c125a624ca35d6d20beb8015b5d0, >= f931551bafe1f10ded7f5282e2aa162c267a2e5d < 3f57c3f67fd93b4da86aeffea1ca32c484d054ad, >= f931551bafe1f10ded7f5282e2aa162c267a2e5d < 60833707b968d5ae02a75edb7886dcd4a957cf0d, >= f931551bafe1f10ded7f5282e2aa162c267a2e5d < 73d2892148aa4397a885b4f4afcfc5b27a325c42, >= f931551bafe1f10ded7f5282e2aa162c267a2e5d < 0f8cdfff06829a0b0348b6debc29ff6a61967724, >= f931551bafe1f10ded7f5282e2aa162c267a2e5d < c3e17e58f571f34c51aeb17274ed02c2ed5cf780, >= f931551bafe1f10ded7f5282e2aa162c267a2e5d < 0d4395477741608d123dad51def9fe50b7ebe952, >= f931551bafe1f10ded7f5282e2aa162c267a2e5d < d39bf40e55e666b5905fdbd46a0dced030ce87be, >= 2.6.35, >= 2.6.35 < 4.4.292, >= 4.5 < 4.9.290, >= 4.10 < 4.14.255, >= 4.15 < 4.19.216, >= 4.20 < 5.4.157, >= 5.5 < 5.10.77, >= 5.11 < 5.14.16, 5.15
Fixed versions
4.4.292, 4.9.290, 4.14.255, 4.19.216, 5.4.157, 5.10.77, 5.14.16

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-120