NetSight
high7.8

CVE-2021-47485

In the Linux kernel, the following vulnerability has been resolved: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields Overflowing either …

Impact

In the Linux kernel, the following vulnerability has been resolved: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields Overflowing either addrlimit or bytes_togo can allow userspace to trigger a buffer overflow of kernel memory. Check for overflows in all the places doing math on user controlled buffers.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.35 before 4.4.292
from 4.5 before 4.9.290
from 4.10 before 4.14.255
from 4.15 before 4.19.216
from 4.20 before 5.4.157
from 5.5 before 5.10.77

Weakness classification

References