CVE-2021-46993

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-46993
In the Linux kernel, the following vulnerability has been resolved: sched: Fix out-of-bound access in uclamp Util-clamp places tasks in different buckets based on their clamp values for performance reasons. However, the size of buckets is currently computed using a rounding division, which can lead to an off-by-one error in some configurations. For instance, with 20 buckets, the bucket size will be 1024/20=51. A task with a clamp of 1024 will be mapped to bucket id 1024/51=20. Sadly, correct indexes are in range [0,19], hence leading to an out of bound memory access. Clamp the bucket id to fix the issue.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3da3f804b82a0a382d523a21acf4cf3bb35f936d Patch
https://git.kernel.org/stable/c/42ee47c7e3569d9a0e2cb5053c496d97d380472f Patch
https://git.kernel.org/stable/c/687f523c134b7f0bd040ee1230f6d17990d54172 Patch
https://git.kernel.org/stable/c/6d2f8909a5fabb73fe2a63918117943986c39b6c Patch
https://git.kernel.org/stable/c/f7347c85490b92dd144fa1fba9e1eca501656ab3 Patch
https://git.kernel.org/stable/c/3da3f804b82a0a382d523a21acf4cf3bb35f936d Patch
https://git.kernel.org/stable/c/42ee47c7e3569d9a0e2cb5053c496d97d380472f Patch
https://git.kernel.org/stable/c/687f523c134b7f0bd040ee1230f6d17990d54172 Patch
https://git.kernel.org/stable/c/6d2f8909a5fabb73fe2a63918117943986c39b6c Patch
https://git.kernel.org/stable/c/f7347c85490b92dd144fa1fba9e1eca501656ab3 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

24 Dec 2024, 14:40

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/3da3f804b82a0a382d523a21acf4cf3bb35f936d - () https://git.kernel.org/stable/c/3da3f804b82a0a382d523a21acf4cf3bb35f936d - Patch
References () https://git.kernel.org/stable/c/42ee47c7e3569d9a0e2cb5053c496d97d380472f - () https://git.kernel.org/stable/c/42ee47c7e3569d9a0e2cb5053c496d97d380472f - Patch
References () https://git.kernel.org/stable/c/687f523c134b7f0bd040ee1230f6d17990d54172 - () https://git.kernel.org/stable/c/687f523c134b7f0bd040ee1230f6d17990d54172 - Patch
References () https://git.kernel.org/stable/c/6d2f8909a5fabb73fe2a63918117943986c39b6c - () https://git.kernel.org/stable/c/6d2f8909a5fabb73fe2a63918117943986c39b6c - Patch
References () https://git.kernel.org/stable/c/f7347c85490b92dd144fa1fba9e1eca501656ab3 - () https://git.kernel.org/stable/c/f7347c85490b92dd144fa1fba9e1eca501656ab3 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-125
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1

21 Nov 2024, 06:35

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: sched: corrige el acceso fuera de los límites en uclamp Util-clamp coloca las tareas en diferentes depósitos según sus valores de fijación por razones de rendimiento. Sin embargo, el tamaño de los depósitos se calcula actualmente mediante una división de redondeo, lo que puede provocar un error de uno por uno en algunas configuraciones. Por ejemplo, con 20 depósitos, el tamaño del depósito será 1024/20=51. Una tarea con una abrazadera de 1024 se asignará al ID del depósito 1024/51=20. Lamentablemente, los índices correctos están en el rango [0,19], lo que provoca un acceso a la memoria fuera de los límites. Sujete la identificación del depósito para solucionar el problema.
References () https://git.kernel.org/stable/c/3da3f804b82a0a382d523a21acf4cf3bb35f936d - () https://git.kernel.org/stable/c/3da3f804b82a0a382d523a21acf4cf3bb35f936d -
References () https://git.kernel.org/stable/c/42ee47c7e3569d9a0e2cb5053c496d97d380472f - () https://git.kernel.org/stable/c/42ee47c7e3569d9a0e2cb5053c496d97d380472f -
References () https://git.kernel.org/stable/c/687f523c134b7f0bd040ee1230f6d17990d54172 - () https://git.kernel.org/stable/c/687f523c134b7f0bd040ee1230f6d17990d54172 -
References () https://git.kernel.org/stable/c/6d2f8909a5fabb73fe2a63918117943986c39b6c - () https://git.kernel.org/stable/c/6d2f8909a5fabb73fe2a63918117943986c39b6c -
References () https://git.kernel.org/stable/c/f7347c85490b92dd144fa1fba9e1eca501656ab3 - () https://git.kernel.org/stable/c/f7347c85490b92dd144fa1fba9e1eca501656ab3 -

28 Feb 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-28 09:15

Updated : 2024-12-24 14:40

NVD link : CVE-2021-46993

Mitre link : CVE-2021-46993

CVE.ORG link : CVE-2021-46993

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read