NetSight
IP …
high7.8

CVE-2021-3612

An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl JSIOC…

Impact

An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl JSIOCSBTNMAP. This flaw allows a local user to crash the system or possibly escalate their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.9.0
RedhatEnterprise Linux
Versions 7.0, 8.0
FedoraprojectFedora
Version 34
DebianDebian Linux
Version 9.0
OracleCommunications Cloud Native Core Binding Support Function
Version 22.1.3
OracleCommunications Cloud Native Core Network Exposure Function
Version 22.1.1
OracleCommunications Cloud Native Core Policy
Version 22.2.0
NetappCloud Backup
All versions
NetappSolidfire Baseboard Management Controller Firmware
All versions
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions

Weakness classification

CWE-20CWE-787

References