CVE-2021-3896

An improper validation of an array index and out of bounds memory read in the Linux kernel’s Integrated Services Digital Network (ISDN) functionality was found in the way users call ioctl CMTPCONNADD. A local user could use this flaw to crash the system or starve the resources causing denial of service.

Mitigation

To mitigate this issue, prevent the module isdn from being loaded. Please see <https://access.redhat.com/solutions/41278&gt; for information on how to blacklist a kernel module to prevent it from loading automatically.