IT

Tracker / CVE-2021-47055

CVE-2021-47055

High 7.1

In the Linux kernel, the following vulnerability has been resolved: mtd: require write permissions for locking and badblock ioctls MEMLOCK, MEMUNLOCK and OTPLOCK modify protection bits. Thus require write permission. Depending on the hardware MEMLOCK might even be write-once, e.g. for SPI-NOR flashes with their WP# tied to GND. OTPLOCK is always write-once. MEMSETBADBLOCK modifies the bad block table.

Affected products and versions

linux linux_kernel · 4.14.194 → 4.14.233
linux linux_kernel · 4.19.139 → 4.19.191
linux linux_kernel · 4.4.233 → 4.4.269
linux linux_kernel · 4.9.233 → 4.9.269
linux linux_kernel · 5.11 → 5.11.21
linux linux_kernel · 5.12 → 5.12.4
linux linux_kernel · 5.4.58 → 5.4.119
linux linux_kernel · 5.9 → 5.10.37

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References