Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2021-47039
HistoryFeb 28, 2024 - 9:15 a.m.

CVE-2021-47039

2024-02-2809:15:39
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
linux kernel
ataflop
out of bounds
vulnerability
fix

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:

ataflop: potential out of bounds in do_format()

The function uses “type” as an array index:

q = unit[drive].disk[type]->queue;

Unfortunately the bounds check on “type” isn’t done until later in the
function. Fix this by moving the bounds check to the start.

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%