VulnerabilityModified
CVE-2021-46920
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback Current code blindly writes over the SWERR and the OVERFLOW bits.
MEDIUM 5.5EPSS 0.22%
Does this matter?
Lower severity and a low EPSS score (0.22%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback Current code blindly writes over the SWERR and the OVERFLOW bits. Write back the bits actually read instead so the driver avoids clobbering the OVERFLOW bit that comes after the register is read.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- EPSS
- 0.22% probability · 12th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/02981a44a0e402089775416371bd2e0c935685f8Patch
- https://git.kernel.org/stable/c/a5ad12d5d69c63af289a37f05187a0c6fe93553dPatch
- https://git.kernel.org/stable/c/ea941ac294d75d0ace50797aebf0056f6f8f7a7fPatch
- https://git.kernel.org/stable/c/02981a44a0e402089775416371bd2e0c935685f8Patch
- https://git.kernel.org/stable/c/a5ad12d5d69c63af289a37f05187a0c6fe93553dPatch
- https://git.kernel.org/stable/c/ea941ac294d75d0ace50797aebf0056f6f8f7a7fPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.