CVE-2021-47040

Katalog CVE

CVSS 7.8 · High EPSS 0,26%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix overflows checks in provide buffers Colin reported before possible overflow and sign extension problems in io_provide_buffers_prep(). As Linus pointed out previous attempt did nothing useful, see d81269fecb8ce ("io_uring: fix provide_buffers sign extension"). Do that with help of check_<op>_overflow helpers. And fix struct io_provide_buf::len type, as it doesn't make much sense to keep it signed.

Rincian

Terbit di NVD

28 Februari 2024

Terakhir diubah

4 Agustus 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 16,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/38134ada0ceea3e848fe993263c0ff6207fd46e7 patch
• https://git.kernel.org/stable/c/51bf90901952aaac564bbdb36b2b503050c53dd9 patch
• https://git.kernel.org/stable/c/84b8c266c4bfe9ed5128e13253c388deb74b1b03 patch
• https://git.kernel.org/stable/c/cbbc13b115b8f18e0a714d89f87fbdc499acfe2d patch