CVE-2021-46934 : In the Linux kernel, the following vulnerability has been resolved: i2c: valida

In the Linux kernel, the following vulnerability has been resolved: i2c: validate user data in compat ioctl Wrong user data may cause warning in i2c_transfer(), ex: zero msgs. Userspace should not be able to trigger warnings, so this patch adds validation checks for user data in compact ioctl to prevent reported warnings

Published 2024-02-27 10:15:08

Updated 2024-04-10 18:19:54

Source Linux

View at NVD, CVE.org

Products affected by CVE-2021-46934

Linux » Linux Kernel
Versions from including (>=) 5.11.0 and before (<) 5.15.13
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.20.0 and before (<) 5.4.170
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.15.0 and before (<) 4.19.224
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 5.5.0 and before (<) 5.10.90
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2021-46934

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 12 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-46934

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N	1.8	1.4	NIST	2024-04-10
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: None

CWE ids for CVE-2021-46934

CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-46934

https://git.kernel.org/stable/c/9e4a3f47eff476097e0c7faac04d1831fc70237d

i2c: validate user data in compat ioctl - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/bb436283e25aaf1533ce061605d23a9564447bdf

i2c: validate user data in compat ioctl - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/407c8708fb1bf2d4afc5337ef50635cf540c364b

i2c: validate user data in compat ioctl - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/8d31cbab4c295d7010ebb729e9d02d0e9cece18f

i2c: validate user data in compat ioctl - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/f68599581067e8a5a8901ba9eb270b4519690e26

i2c: validate user data in compat ioctl - kernel/git/stable/linux.git - Linux kernel stable tree
Patch

Jump to

Vulnerability Details : CVE-2021-46934

Products affected by CVE-2021-46934

Exploit prediction scoring system (EPSS) score for CVE-2021-46934

CVSS scores for CVE-2021-46934

CWE ids for CVE-2021-46934

References for CVE-2021-46934