CVE-2021-42252

🗓️ 11 Oct 2021 18:45:27Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 272 Views

An issue in aspeed_lpc_ctrl_mmap in Linux kernel before 5.14.6 allows local attackers to overwrite kernel memory and potentially execute privileges, aka CID-b49a0e69a7b1

Reporter	Title	Published	Views	Family All 314
AstraLinux	Astra Linux - уязвимость в linux	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the `aspeed_lpc_ctrl_mmap` function in the drivers/soc/aspeed/aspeed-lpc-ctrl.c file of the Linux kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.	21 Sep 202200:00	–	bdu_fstec
CBLMariner	CVE-2021-42252 affecting package kernel 5.10.189.1-1	3 Nov 202119:21	–	cbl_mariner
CBLMariner	CVE-2021-42252 affecting package kernel for versions less than 5.10.78.1-1	9 Apr 202206:52	–	cbl_mariner
Circl	CVE-2021-42252	11 Oct 202122:24	–	circl
CNNVD	Linux kernel 安全漏洞	11 Oct 202100:00	–	cnnvd
CNVD	Linux kernel memory overwrite vulnerability	12 Oct 202100:00	–	cnvd
Cvelist	CVE-2021-42252	11 Oct 202118:45	–	cvelist
Debian CVE	CVE-2021-42252	11 Oct 202118:45	–	debiancve
EUVD	EUVD-2021-29228	3 Oct 202520:07	–	euvd

NVD

Node

linux linux_kernelRange<5.14.6

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h300e_firmwareMatch-

AND

netapp h300eMatch-

Node

netapp h500e_firmwareMatch-

AND

netapp h500eMatch-

Node

netapp h700e_firmwareMatch-

AND

netapp h700eMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

netapp h410c_firmwareMatch-

AND

netapp h410cMatch-

Node

netapp solidfire_baseboard_management_controller_firmwareMatch-

AND

netapp solidfire_baseboard_management_controllerMatch-

Source	Link
cdn	www.cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.6
security	www.security.netapp.com/advisory/ntap-20211112-0006/
git	www.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/

21 Nov 2024 06:27Current

7.2High risk

Vulners AI Score7.2

CVSS 24.6

CVSS 3.17.8

EPSS0.00125