Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47474

comedi: vmk80xx: fix bulk-buffer overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: comedi: vmk80xx: fix bulk-buffer overflow The driver is using endpoint-sized buffers but must not assume that the tx and rx buffers are of equal size or a malicious device could overflow the slab-allocated receive buffer when doing bulk transfers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to < e0e6a63fd97ad95fe05dfd77268a1952551e11a7affected
  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to < 7cfb35db607760698d299fd1cf7402dfa8f09973affected
  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to < 0866dcaa828c21bc2f94dac00e086078f11b5772affected
  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to < 063f576c43d589a4c153554b681d32b3f8317c7baffected
  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to < 1ae4715121a57bc6fa29fd992127b01907f2f993affected
  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to < b7fd7f3387f070215e6be341e68eb5c087eeecc0affected
  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to < 7b0e356189327287d0eb98ec081bd6dd97068cd3affected
  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to < 47b4636ebdbeba2044b3db937c4d2b6a4fe3d0f2affected
  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to < 78cdfd62bd54af615fba9e3ca1ba35de39d3871daffected

Linux Linux

Default version status: affected

  • 2.6.31affected
  • 0 to < 2.6.31unaffected
  • 4.4.292 to ≤ 4.4.*unaffected
  • 4.9.290 to ≤ 4.9.*unaffected
  • 4.14.255 to ≤ 4.14.*unaffected
  • 4.19.217 to ≤ 4.19.*unaffected
  • 5.4.159 to ≤ 5.4.*unaffected
  • 5.10.79 to ≤ 5.10.*unaffected
  • 5.14.18 to ≤ 5.14.*unaffected
  • 5.15.2 to ≤ 5.15.*unaffected
  • 5.16 to ≤ *unaffected

References