IT

Tracker / CVE-2021-47039

CVE-2021-47039

High 7.1

In the Linux kernel, the following vulnerability has been resolved: ataflop: potential out of bounds in do_format() The function uses "type" as an array index: q = unit[drive].disk[type]->queue; Unfortunately the bounds check on "type" isn't done until later in the function. Fix this by moving the bounds check to the start.

Affected products and versions

linux linux_kernel · 5.11 → 5.11.21
linux linux_kernel · 5.12 → 5.12.4

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References