NetSight
IP …
high7.8

CVE-2021-42008

The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write.

Impact

The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.12 before 4.4.282
from 4.5 before 4.9.281
from 4.10 before 4.14.245
from 4.15 before 4.19.205
from 4.20 before 5.4.143
from 5.5 before 5.10.61
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH300e Firmware
All versions
NetappH500e Firmware
All versions
NetappH700e Firmware
All versions
NetappH410s Firmware
All versions
NetappH410c Firmware
All versions
NetappSolidfire Baseboard Management Controller Firmware
All versions
DebianDebian Linux
Version 9.0

Weakness classification

CWE-787

References