Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-47086
HistoryMar 04, 2024 - 12:00 a.m.

CVE-2021-47086

2024-03-0400:00:00
ubuntu.com
ubuntu.com
6
linux kernel
vulnerability resolved
phonet
socket
object
unix

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%

In the Linux kernel, the following vulnerability has been resolved:
phonet/pep: refuse to enable an unbound pipe This ioctl() implicitly
assumed that the socket was already bound to a valid local socket name,
i.e. Phonet object. If the socket was not bound, two separate problems
would occur: 1) We’d send an pipe enablement request with an invalid source
object. 2) Later socket calls could BUG on the socket unexpectedly being
connected yet not bound to a valid object.

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%