Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-47339
HistoryMay 21, 2024 - 12:00 a.m.

CVE-2021-47339

2024-05-2100:00:00
ubuntu.com
ubuntu.com
2
linux kernel
vulnerability fix
uninitialized stack data
driver ioctl handlers
information leak

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: media:
v4l2-core: explicitly clear ioctl input data As seen from a recent syzbot
bug report, mistakes in the compat ioctl implementation can lead to
uninitialized kernel stack data getting used as input for driver ioctl
handlers. The reported bug is now fixed, but it’s possible that other
related bugs are still present or get added in the future. As the drivers
need to check user input already, the possible impact is fairly low, but it
might still cause an information leak. To be on the safe side, always clear
the entire ioctl buffer before calling the conversion handler functions
that are meant to initialize them.

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Related for UB:CVE-2021-47339