תיאור (מקור, אנגלית)
A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.
מוצרים מושפעים
linux: linux kernel; redhat: enterprise linux; redhat: enterprise linux for real time; redhat: enterprise linux for real time for nfv; redhat: enterprise linux for real time for nfv tus; redhat: enterprise linux for real time tus; fedoraproject: fedora; redhat: virtualization; redhat: virtualization host; netapp: cloud backup; netapp: solidfire baseboard management controller firmware; netapp: h300s firmware; netapp: h300s; netapp: h500s firmware; netapp: h500s
קישורים6
- git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/com… Mailing ListPatchVendor Advisory
- git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/com… Mailing ListPatchVendor Advisory
- bugzilla.redhat.com/show_bug.cgi?id=1950136 Issue TrackingPatchThird Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=1950136 Issue TrackingPatchThird Party Advisory
- security.netapp.com/advisory/ntap-20210618-0008/ Third Party Advisory
- security.netapp.com/advisory/ntap-20210618-0008/ Third Party Advisory
מדדים
- CVSS 3.1
-
7.1
HIGH
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H - EPSS — סבירות ניצול
- 0% אחוזון 32 · נכון ל-6 בנובמבר 2026
- CWE
- CWE-787
האם אפשר לנצל את הפגיעות הזו אצלכם?
עדכון אבטחה סוגר את הפרצה הידועה. בדיקת חדירות מראה לאן תוקף עדיין יכול להגיע — עם הוכחה.