CVE-2021-46934: i2c: validate user data in compat ioctl
In the Linux kernel, the following vulnerability has been resolved:
i2c: validate user data in compat ioctl
The Linux kernel CVE team has assigned CVE-2021-46934 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024022750-CVE-2021-46934-79c8@gregkh/T/#u
Other sources
In the Linux kernel, the following vulnerability has been resolved:
i2c: validate user data in compat ioctl
Wrong user data may cause warning in i2ctransfer(), ex: zero msgs. Userspace should not be able to trigger warnings, so this patch adds validation checks for user data in compact ioctl to prevent reported warnings
— NVD
Linux Kernel is vulnerable to a denial of service, caused by improper validating user data in compat ioctl. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service condition.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-46934?
CVE-2021-46934 is classified as a medium severity vulnerability.
How do I fix CVE-2021-46934?
To fix CVE-2021-46934, update your Linux kernel to a version that patched the vulnerability.
What systems are affected by CVE-2021-46934?
CVE-2021-46934 affects specific versions of the Linux kernel between 4.15 and 5.15.
What does CVE-2021-46934 involve?
CVE-2021-46934 involves the need to validate user data in compat ioctl within the Linux kernel.
Can CVE-2021-46934 lead to further exploitation?
Yes, exploiting CVE-2021-46934 could potentially allow unauthorized access or modification of system data.