Back to feed
EUVD-2021-30837 · Published Nov 17, 2021
In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value.
Technologies
Netapp H500S FirmwareNetapp H700E FirmwareFedoraproject FedoraNetapp H500SNetapp H500ENetapp H700ENetapp H410SLinux Linux KernelNetapp H410S FirmwareNetapp H300E FirmwareNetapp H300ENetapp H700S FirmwareNetapp Cloud BackupNetapp H700SDebian Debian LinuxNetapp H500E FirmwareNetapp H410CNetapp H410C Firmware
Weaknesses
CWE-787
CVSS scores
- v3.16.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - v2.04.6
AV:L/AC:L/Au:N/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
- https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=b922f622592af76b57cbc566eaeccda0b31a3496
- https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X24M7KDC4OJOZNS3RDSYC7ELNELOLQ2N/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YODMYMGZYDXQKGJGX7TJG4XV4L5YLLBD/
- https://lore.kernel.org/netdev/163698540868.13805.17800408021782408762.git-patchwork-notify%40kernel.org/T/
- https://security.netapp.com/advisory/ntap-20211210-0001/
Potentially impacted assets
See if this affects your attack surface
