CVE-2021-47352 in Linux

Résumé

par MITRE • 21/05/2024

In the Linux kernel, the following vulnerability has been resolved:

virtio-net: Add validation for used length

This adds validation for used length (might come from an untrusted device) to avoid data corruption or loss.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Réserver: 21/05/2024
• Divulgation: 21/05/2024
• Modérer: accepté
• Entrée: VDB-265720
• CPE: prêt
• CWE: CWE-119 (confirmé)
• CVSS: 7.8 (NVD)
• EPSS: 0.00263
• KEV: non
• Activités: très faible
• Secteur: Lawfirm, Finance, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-47352
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-47352
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-47352/