Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47039

ataflop: potential out of bounds in do_format()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ataflop: potential out of bounds in do_format() The function uses "type" as an array index: q = unit[drive].disk[type]->queue; Unfortunately the bounds check on "type" isn't done until later in the function. Fix this by moving the bounds check to the start.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • bf9c0538e485b591a2ee02d9adb8a99db4be5a2a to < 07f86aa8f4fe077be1b018cc177eb8c6573e5671affected
  • bf9c0538e485b591a2ee02d9adb8a99db4be5a2a to < 2a3a8bbca28b899806844c00d49ed1b7ccb50957affected
  • bf9c0538e485b591a2ee02d9adb8a99db4be5a2a to < 1ffec389a6431782a8a28805830b6fae9bf00af1affected

Linux Linux

Default version status: affected

  • 5.11affected
  • 0 to < 5.11unaffected
  • 5.11.21 to ≤ 5.11.*unaffected
  • 5.12.4 to ≤ 5.12.*unaffected
  • 5.13 to ≤ *unaffected

References