CVE-2021-47055
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2021-47055 is a vulnerability affecting the Linux kernel that has been addressed. This issue lies in the 'mtd' subsystem where certain ioctls (Input/Output Control) require write permissions for locking and modifying protection bits, such as MEMLOCK, MEMUNLOCK, and OTPLOCK. Given that MEMLOCK might be write-once on certain hardware, and OTPLOCK is always write-once, the requirement for write access could potentially lead to unintended consequences. Furthermore, the MEMSETBADBLOCK ioctl, which modifies the bad block table, also necessitates write permissions.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX