CVE-2021-32078

Published: Jun 17, 2021Modified: Jun 17, 2026

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Exploitability: 1.8 / Impact: 5.2

Source: NVD

Description

An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4.

Affected (1)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 5.12.11

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (8)

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=298a58e165e447ccfaae35fe9f651f9d7e15166f

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/torvalds/linux/commit/298a58e165e447ccfaae35fe9f651f9d7e15166f

Source: cve@mitre.org

PatchThird Party Advisory

https://kirtikumarar.com/CVE-2021-32078.txt

Source: cve@mitre.org

ExploitThird Party Advisory

https://security.netapp.com/advisory/ntap-20210813-0002/

Source: cve@mitre.org

Third Party Advisory

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=298a58e165e447ccfaae35fe9f651f9d7e15166f

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/torvalds/linux/commit/298a58e165e447ccfaae35fe9f651f9d7e15166f

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://kirtikumarar.com/CVE-2021-32078.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://security.netapp.com/advisory/ntap-20210813-0002/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.