NetSight
IP …
high7.8

CVE-2021-38160

In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len va…

Impact

In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size. NOTE: the vendor indicates that the cited data corruption is not a vulnerability in any existing use case; the length validation was added solely for robustness in the face of anomalous host OS behavior

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.24 before 4.4.276
from 4.5 before 4.9.276
from 4.10 before 4.14.240
from 4.15 before 4.19.198
from 4.20 before 5.4.134
from 5.5 before 5.10.52
NetappHci Bootstrap Os
All versions
NetappHci Management Node
All versions
NetappSolidfire
All versions
NetappElement Software
All versions
DebianDebian Linux
Versions 9.0, 10.0
RedhatEnterprise Linux
Version 8.0

Weakness classification

CWE-120

References