← Back

CVE-2021-38160

nvd nist
Published: Aug 7, 2021Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size. NOTE: the vendor indicates that the cited data corruption is not a vulnerability in any existing use case; the length validation was added solely for robustness in the face of anomalous host OS behavior

Affected (15)

Show all products
Linux: Linux Kernel · Netapp: Hci Bootstrap Os, Hci Management Node, Solidfire, Element Software · Debian: Debian Linux · Redhat: Enterprise Linux
Linux
1 product
Linux Kernel
Netapp
4 products
Hci Bootstrap Os
Hci Management Node
Solidfire
Element Software
Debian
1 product
Debian Linux
Redhat
1 product
Enterprise Linux
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
From 2.6.24 to 4.4.276
Linux Kernel
From 4.10 to 4.14.240
Linux Kernel
From 4.15 to 4.19.198
Linux Kernel
From 4.20 to 5.4.134
Linux Kernel
From 4.5 to 4.9.276
Linux Kernel
From 5.11 to 5.12.19
Linux Kernel
From 5.13 to 5.13.4
Linux Kernel
From 5.5 to 5.10.52
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Hci Bootstrap Os
All versions
Running on/withPlatform Versions
Netapp
Hci Compute Node
All versions
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Hci Management Node
All versions
Solidfire
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Element Software
All versions
Running on/withPlatform Versions
Netapp
Hci Storage Node
All versions
Configuration E
3 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 10.0
Debian Linux
Version 9.0
Enterprise Linux
Version 8.0

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (14)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Release NotesVendor Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.