SB2022042147 - Privilege escalation in Linux kernel atlantic driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2022042147

SB2022042147 - Privilege escalation in Linux kernel atlantic driver

Published: April 21, 2022

Security Bulletin ID SB2022042147
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Physical access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Out-of-bounds write (CVE-ID: CVE-2021-43975)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the hw_atl_utils_fw_rpc_wait() function in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c in Linux kernel. A local user can attach a specially crafted device to the system, trigger an out-of-bounds write and execute arbitrary code with elevated privileges.


Remediation

Install update from vendor's website.

References