CVE-2021-46976

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Feb 28, 2024
Updated: Jan 10, 2025

Summary

CVE-2021-46976 is a vulnerability affecting the Linux kernel's i915 graphics driver. The issue lies in the auto_retire function where the retire logic uses the lower bits of the pointer to store flags, but the auto_retire function is not guaranteed to be aligned to a multiple of 4. This misalignment results in crashes as the system jumps to the wrong address, leading to an invalid opcode error. The vulnerability was first identified on a Google Volteer2 system and could potentially impact other systems using unaligned pointers in similar contexts.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share