CVE-2021-47055

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Feb 29, 2024
Updated: Jan 9, 2025
CWE ID 667

Summary

CVE-2021-47055 is a vulnerability affecting the Linux kernel that has been addressed. This issue lies in the 'mtd' subsystem where certain ioctls (Input/Output Control) require write permissions for locking and modifying protection bits, such as MEMLOCK, MEMUNLOCK, and OTPLOCK. Given that MEMLOCK might be write-once on certain hardware, and OTPLOCK is always write-once, the requirement for write access could potentially lead to unintended consequences. Furthermore, the MEMSETBADBLOCK ioctl, which modifies the bad block table, also necessitates write permissions.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share