Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-47039
HistoryFeb 28, 2024 - 9:15 a.m.

Out-of-bounds

2024-02-2809:15:00
PRIOn knowledge base
www.prio-n.com
11
linux
kernel
ataflop
vulnerability
fixed
bounds check
array index
nvd

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:

ataflop: potential out of bounds in do_format()

The function uses “type” as an array index:

q = unit[drive].disk[type]->queue;

Unfortunately the bounds check on “type” isn’t done until later in the
function. Fix this by moving the bounds check to the start.

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%