K01311313 : Linux kernel vulnerability CVE-2021-3612

Security Advisory Description

An out-of-bounds memory write flaw was found in the Linux kernel’s joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl JSIOCSBTNMAP. This flaw allows a local user to crash the system or possibly escalate their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. (CVE-2021-3612)

Impact

A local attacker may be able to exploit this vulnerability to escalate privileges on a vulnerable system and gain access to restricted resources, modify files, or cause a denial-of-service (DoS).