CVE-2021-47086

Summary

In the Linux kernel, the following vulnerability has been resolved:

phonet/pep: refuse to enable an unbound pipe

This ioctl() implicitly assumed that the socket was already bound to a valid local socket name, i.e. Phonet object. If the socket was not bound, two separate problems would occur:

  1. We'd send an pipe enablement request with an invalid source object.
  2. Later socket calls could BUG on the socket unexpectedly being connected yet not bound to a valid object.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxbdb6e697b2a76c541960b86ab8fda88f3de1adf2 < 0bbdd62ce9d44f3a22059b3d20a0df977d9f6d59affected
LinuxLinuxbdb6e697b2a76c541960b86ab8fda88f3de1adf2 < b10c7d745615a092a50c2e03ce70446d2bec2acaaffected
LinuxLinuxbdb6e697b2a76c541960b86ab8fda88f3de1adf2 < 311601f114859d586d5ef8833d60d3aa23282161affected
LinuxLinuxbdb6e697b2a76c541960b86ab8fda88f3de1adf2 < 982b6ba1ce626ef87e5c29f26f2401897554f235affected
LinuxLinuxbdb6e697b2a76c541960b86ab8fda88f3de1adf2 < 48c76fc53582e7f13c1e0b11c916e503256c4d0baffected
LinuxLinuxbdb6e697b2a76c541960b86ab8fda88f3de1adf2 < 52ad5da8e316fa11e3a50b3f089aa63e4089bf52affected
LinuxLinuxbdb6e697b2a76c541960b86ab8fda88f3de1adf2 < 53ccdc73eedaf0e922c45b569b797d2796fbaafaaffected
LinuxLinuxbdb6e697b2a76c541960b86ab8fda88f3de1adf2 < 75a2f31520095600f650597c0ac41f48b5ba0068affected
LinuxLinux3.3affected
LinuxLinux0 < 3.3unaffected
LinuxLinux4.4.297 <= 4.4.*unaffected
LinuxLinux4.9.295 <= 4.9.*unaffected
LinuxLinux4.14.260 <= 4.14.*unaffected
LinuxLinux4.19.223 <= 4.19.*unaffected
LinuxLinux5.4.169 <= 5.4.*unaffected
LinuxLinux5.10.89 <= 5.10.*unaffected
LinuxLinux5.15.12 <= 5.15.*unaffected
LinuxLinux5.16 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References