CVE-2021-46965

2024-02-2700:00:00

ubuntu.com

cve-2021-46965

linux kernel

vulnerability

mtd

physmap

stack access

cast &data

byte offset

out-of-bounds access

unix

AI Score

6.7

Confidence

High

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved: mtd:
physmap: physmap-bt1-rom: Fix unintentional stack access Cast &data to
(char *) in order to avoid unintentionally accessing the stack. Notice that
data is of type u32, so any increment to &data will be in the order of
4-byte chunks, and this piece of code is actually intended to be a byte
offset. Addresses-Coverity-ID: 1497765 (“Out-of-bounds access”)