Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2021-47055

mtd: require write permissions for locking and badblock ioctls

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: require write permissions for locking and badblock ioctls MEMLOCK, MEMUNLOCK and OTPLOCK modify protection bits. Thus require write permission. Depending on the hardware MEMLOCK might even be write-once, e.g. for SPI-NOR flashes with their WP# tied to GND. OTPLOCK is always write-once. MEMSETBADBLOCK modifies the bad block table.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1c9f9125892a43901438bf704ada6b7019e2a884 to < f4d28d8b9b0e7c4ae04214b8d7e0b0466ec6bcafaffected
  • 583d42400532fbd6228b0254d7c732b771e4750d to < 9625b00cac6630479c0ff4b9fafa88bee636e1f0affected
  • 389c74c218d3b182e9cd767e98cee0e0fd0dabaa to < f73b29819c6314c0ba8b7d5892dfb03487424beeaffected
  • ab1a602a9cea98aa37b2e6851b168d2a2633a58d to < 75ed985bd6c8ac1d4e673e93ea9d96c9908c1d37affected
  • 9a53e8bd59d9f070505e51d3fd19606a270e6b93 to < 5880afefe0cb9b2d5e801816acd58bfe91a96981affected
  • f7e6b19bc76471ba03725fe58e0c218a3d6266c3 to < 7b6552719c0ccbbea29dde4be141da54fdb5877eaffected
  • f7e6b19bc76471ba03725fe58e0c218a3d6266c3 to < 077259f5e777c3c8821f6b41dee709fcda27306baffected
  • f7e6b19bc76471ba03725fe58e0c218a3d6266c3 to < a08799d3e8c8088640956237c183f83463c39668affected
  • f7e6b19bc76471ba03725fe58e0c218a3d6266c3 to < 1e97743fd180981bef5f01402342bb54bf1c6366affected
  • 36a8b2f49235e63ab3f901fe12e1b6732f075c2eaffected
  • eb3d82abc335624a5e8ecfb75aba0b684e2dc4dbaffected
  • 4.4.233 to < 4.4.269affected
  • 4.9.233 to < 4.9.269affected
  • 4.14.194 to < 4.14.233affected
  • 4.19.139 to < 4.19.191affected
  • 5.4.58 to < 5.4.119affected
  • 5.7.15 to < 5.8affected
  • 5.8.1 to < 5.9affected

Linux Linux

Default version status: affected

  • 5.9affected
  • 0 to < 5.9unaffected
  • 4.4.269 to ≤ 4.4.*unaffected
  • 4.9.269 to ≤ 4.9.*unaffected
  • 4.14.233 to ≤ 4.14.*unaffected
  • 4.19.191 to ≤ 4.19.*unaffected
  • 5.4.119 to ≤ 5.4.*unaffected
  • 5.10.37 to ≤ 5.10.*unaffected
  • 5.11.21 to ≤ 5.11.*unaffected
  • 5.12.4 to ≤ 5.12.*unaffected
  • 5.13 to ≤ *unaffected

References