An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 05:59
Type | Values Removed | Values Added |
---|---|---|
References | () https://git.kernel.org/linus/20c40794eb85ea29852d7bc37c55713802a543d6 - Mailing List, Patch, Vendor Advisory | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OMRQVOTASD3VZP6GE4JJHE27QU6FHTZ6/ - | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJPVQZPY3DHPV5I3IVNMSMO6D3PKZISX/ - | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XAUNYDTGE6MB4NWL2SIHPCODCLET3JZB/ - | |
References | () https://lore.kernel.org/stable/YD03ew7+6v0XPh6l%40kroah.com/ - | |
References | () https://security.netapp.com/advisory/ntap-20210401-0003/ - Third Party Advisory |
07 Nov 2023, 03:32
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2021-03-15 05:15
Updated : 2024-11-21 05:59
NVD link : CVE-2021-28375
Mitre link : CVE-2021-28375
CVE.ORG link : CVE-2021-28375
JSON object : View
Products Affected
fedoraproject
- fedora
linux
- linux_kernel
netapp
- solidfire_baseboard_management_controller_firmware
- cloud_backup
CWE
CWE-862
Missing Authorization