PT-2021-8097
CVE-2021-4439
·
تاريخ النشر
2021-10-08
·
تاريخ التحديث
2026-10-21
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.15.0-rc2+
Description
The vulnerability is related to an array index out of bounds bug in the
cmtp add connection function of the isdn component in the Linux kernel. This bug can be triggered when the detach capi ctr function is called to detach a register controller that is not attached yet. The vulnerability can cause a denial of service.Technical details about exploitation include:
- The
cmtp add connectionfunction adds a cmtp session to a controller and runs a kernel thread to process cmtp. - The kernel thread calls
detach capi ctrto detach a register controller, which can trigger the array-index-out-bounds bug if the controller is not attached yet. - The bug is caused by an index of -1 being out of range for the type
capi ctr *[32]. - The
detach capi ctrfunction is called bycmtp session, which is run by the kernel thread.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾