NetSight
IP …
high7.8

CVE-2021-33909

fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-o…

Impact

fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.12.43 before 3.13
from 3.16 before 4.4.276
from 4.5 before 4.9.276
from 4.10 before 4.14.240
from 4.15 before 4.19.198
from 4.20 before 5.4.134
FedoraprojectFedora
Version 34
DebianDebian Linux
Versions 9.0, 10.0
NetappHci Management Node
All versions
NetappSolidfire
All versions
OracleCommunications Session Border Controller
Versions 8.2, 8.3, 8.4, 9.0
SonicwallSma1000 Firmware
through 12.4.2-02044

Weakness classification

CWE-190CWE-787

References