CVE-2021-42008

🗓️ 04 Oct 2021 23:17:08Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 299 Views

The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access

Reporter	Title	Published	Views	Family All 350
GithubExploit	Exploit for Out-of-bounds Write in Linux Linux_Kernel	3 Dec 202113:18	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Linux Linux_Kernel	3 Dec 202114:08	–	githubexploit
AstraLinux	Astra Linux - уязвимость в linux, linux-5.10	20 May 202605:53	–	astralinux
CBLMariner	CVE-2021-42008 affecting package kernel 5.10.189.1-1	3 Nov 202119:21	–	cbl_mariner
CBLMariner	CVE-2021-42008 affecting package kernel for versions less than 5.10.78.1-1	9 Apr 202206:52	–	cbl_mariner
Circl	CVE-2021-42008	3 Dec 202114:12	–	circl
CNNVD	Linux kernel 缓冲区错误漏洞	4 Oct 202100:00	–	cnnvd
Cvelist	CVE-2021-42008	4 Oct 202123:17	–	cvelist
Debian	[SECURITY] [DLA 2843-1] linux security update	16 Dec 202121:27	–	debian
Debian CVE	CVE-2021-42008	4 Oct 202123:17	–	debiancve

NVD

Node

linux linux_kernelRange2.6.12–4.4.282

linux linux_kernelRange4.5–4.9.281

linux linux_kernelRange4.10–4.14.245

linux linux_kernelRange4.15–4.19.205

linux linux_kernelRange4.20–5.4.143

linux linux_kernelRange5.5–5.10.61

linux linux_kernelRange5.11–5.13.13

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h300e_firmwareMatch-

AND

netapp h300eMatch-

Node

netapp h500e_firmwareMatch-

AND

netapp h500eMatch-

Node

netapp h700e_firmwareMatch-

AND

netapp h700eMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

netapp h410c_firmwareMatch-

AND

netapp h410cMatch-

Node

netapp solidfire_baseboard_management_controller_firmwareMatch-

AND

netapp solidfire_baseboard_management_controllerMatch-

Node

debian debian_linuxMatch9.0

Source	Link
youtube	www.youtube.com/watch
cdn	www.cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.13
git	www.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/
lists	www.lists.debian.org/debian-lts-announce/2021/12/msg00012.html
security	www.security.netapp.com/advisory/ntap-20211104-0002/

21 Nov 2024 06:27Current

7.2High risk

Vulners AI Score7.2

CVSS 26.9

CVSS 3.17.8

EPSS0.00929

CWE-787