CVE-2021-22556
The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache invalidation operations on pages that they don’t own, allowing them to control kernel memory from userspace.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.16%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache invalidation operations on pages that they don’t own, allowing them to control kernel memory from userspace. We recommend upgrading to kernel version 4.1 or beyond.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.16% probability · 5th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-190
- Affected
- google/fuchsia
- Source
- cve-coordination@google.com
References
- https://fuchsia-review.googlesource.com/c/fuchsia/+/570881Issue Tracking, Patch, Third Party Advisory
- https://fuchsia.dev/whats-new/release-notes/f4-1Release Notes, Vendor Advisory
- https://fuchsia-review.googlesource.com/c/fuchsia/+/570881Issue Tracking, Patch, Third Party Advisory
- https://fuchsia.dev/whats-new/release-notes/f4-1Release Notes, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.