← Back

CVE-2021-33655

nvd nist
Published: Jul 18, 2022Modified: Jun 17, 2026

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD

Description

When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.

Affected (8)

Linux
1 product
Linux Kernel
Debian
1 product
Debian Linux
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
Before 5.19
Linux Kernel
Version 5.19 rc1
Linux Kernel
Version 5.19 rc2
Linux Kernel
Version 5.19 rc3
Linux Kernel
Version 5.19 rc4
Linux Kernel
Version 5.19 rc5
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 10.0
Debian Linux
Version 11.0

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (8)

Source: securities@openeuler.org
Mailing ListPatchThird Party Advisory
Source: securities@openeuler.org
Mailing ListPatchVendor Advisory
Source: securities@openeuler.org
Mailing ListThird Party Advisory
Source: securities@openeuler.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.