Review reviewHigh

CVE-2021-47605

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: vduse: fix memory corruption in vduse_dev_ioctl() The "config.offset" comes from the user. There needs to a check to prevent it being out of bounds. The "config.offset" and "dev->config_size" variables are both type u32. So if the offset if out of bounds then the "dev->config_size - config.offset" subtraction results in a very high u32 value. The out of bounds offset can result in memory corruption.

CVSS: 7.8
EPSS: 0.21%
CISA KEV: Not listed
Published: 2024.06.20

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.21%

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= c8a6153b6c59d95c0e091f053f6f180952ade91e < e6c67560b4341914bec32ec536e931c22062af65, >= c8a6153b6c59d95c0e091f053f6f180952ade91e < ff9f9c6e74848170fcb45c8403c80d661484c8c9, >= 5.15, >= 5.15 < 5.15.11, 5.16
Fixed versions: 5.15.11

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-787