Out-of-bounds write in Linux kernel - CVE-2021-46974

Vulnerability identifier: #VU92191

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-46974

CWE-ID: CWE-787

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service attack.

The vulnerability exists due to improper handling of masking negation logic upon a negative destination register. A local user can cause a denial of service by exploiting this flaw.

Linux kernel
Storage Resource Manager
EMC Cloud Tiering Appliance
Dell EMC Storage Monitoring and Reporting (SMR)
Dell Secure Connect Gateway

Install updates from vendor's website.

Linux kernel - addressed in versions 4.14.233, 4.19.190, 5.4.117, 5.10.35, 5.11.19, 5.12.2
Storage Resource Manager - update to 5.0.1.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.1.0
Dell Secure Connect Gateway - update to 5.24.00.14
EMC Cloud Tiering Appliance - update to 13.2.0.2.29

• https://git.kernel.org/stable/c/4d542ddb88fb2f39bf7f14caa2902f3e8d06f6ba
• https://git.kernel.org/stable/c/0e2dfdc74a7f4036127356d42ea59388f153f42c
• https://git.kernel.org/stable/c/53e0db429b37a32b8fc706d0d90eb4583ad13848
• https://git.kernel.org/stable/c/2cfa537674cd1051a3b8111536d77d0558f33d5d
• https://git.kernel.org/stable/c/6eba92a4d4be8feb4dc33976abac544fa99d6ecc
• https://git.kernel.org/stable/c/7cf64d8679ca1cb20cf57d6a88bfee79a0922a66
• https://git.kernel.org/stable/c/b9b34ddbe2076ade359cd5ce7537d5ed019e9807

• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)