Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2021-46965
HistoryFeb 27, 2024 - 7:04 p.m.

CVE-2021-46965

2024-02-2719:04:07
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
5
linux kernel
mtd
physmap
stack access
vulnerability
byte offset
out-of-bounds access
security

AI Score

6.3

Confidence

Low

EPSS

0

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved:

mtd: physmap: physmap-bt1-rom: Fix unintentional stack access

Cast &data to (char *) in order to avoid unintentionally accessing
the stack.

Notice that data is of type u32, so any increment to &data
will be in the order of 4-byte chunks, and this piece of code
is actually intended to be a byte offset.

Addresses-Coverity-ID: 1497765 (“Out-of-bounds access”)

AI Score

6.3

Confidence

Low

EPSS

0

Percentile

15.5%