Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47086

phonet/pep: refuse to enable an unbound pipe

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: refuse to enable an unbound pipe This ioctl() implicitly assumed that the socket was already bound to a valid local socket name, i.e. Phonet object. If the socket was not bound, two separate problems would occur: 1) We'd send an pipe enablement request with an invalid source object. 2) Later socket calls could BUG on the socket unexpectedly being connected yet not bound to a valid object.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to < 0bbdd62ce9d44f3a22059b3d20a0df977d9f6d59affected
  • bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to < b10c7d745615a092a50c2e03ce70446d2bec2acaaffected
  • bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to < 311601f114859d586d5ef8833d60d3aa23282161affected
  • bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to < 982b6ba1ce626ef87e5c29f26f2401897554f235affected
  • bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to < 48c76fc53582e7f13c1e0b11c916e503256c4d0baffected
  • bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to < 52ad5da8e316fa11e3a50b3f089aa63e4089bf52affected
  • bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to < 53ccdc73eedaf0e922c45b569b797d2796fbaafaaffected
  • bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to < 75a2f31520095600f650597c0ac41f48b5ba0068affected

Linux Linux

Default version status: affected

  • 3.3affected
  • 0 to < 3.3unaffected
  • 4.4.297 to ≤ 4.4.*unaffected
  • 4.9.295 to ≤ 4.9.*unaffected
  • 4.14.260 to ≤ 4.14.*unaffected
  • 4.19.223 to ≤ 4.19.*unaffected
  • 5.4.169 to ≤ 5.4.*unaffected
  • 5.10.89 to ≤ 5.10.*unaffected
  • 5.15.12 to ≤ 5.15.*unaffected
  • 5.16 to ≤ *unaffected

References