Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2021-47286
HistoryMay 21, 2024 - 3:15 p.m.

CVE-2021-47286

2024-05-2115:15:16
Debian Security Bug Tracker
security-tracker.debian.org
1
linux kernel
vulnerability
cve-2021-47286
validation
mhi bus
channel id
command completions
out of bound access

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: core: Validate channel ID when processing command completions MHI reads the channel ID from the event ring element sent by the device which can be any value between 0 and 255. In order to prevent any out of bound accesses, add a check against the maximum number of channels supported by the controller and those channels not configured yet so as to skip processing of that event ring element.

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Related for DEBIANCVE:CVE-2021-47286