Wind River Support Network

HomeDefectsLINCD-6316
Fixed

LINCD-6316 : Security Advisory - linux - CVE-2021-38160

Created: Aug 7, 2021    Updated: Sep 13, 2022
Resolved Date: Aug 11, 2021
Found In Version: 10.20.6.0
Fix Version: 10.21.33.0
Severity: Standard
Applicable for: Wind River Linux CD
Component/s: Kernel

Description

In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size.

CREATE(Triage):(User=admin) CVE-2021-38160 (https://nvd.nist.gov/vuln/detail/CVE-2021-38160)

CVEs


Live chat
Online