CVEvulnerability

CVE-2021-3612

7.8 HIGH Published 2021-07-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-07-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20, CWE-787

Description

An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl JSIOCSBTNMAP. This flaw allows a local user to crash the system or possibly escalate their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Affected configurations

• linux linux kernel (< 5.9.0) • redhat enterprise linux 7.0 • redhat enterprise linux 8.0 • fedoraproject fedora 34 • debian debian linux 9.0 • oracle communications cloud native core binding support function 22.1.3 • oracle communications cloud native core network exposure function 22.1.1 • oracle communications cloud native core policy 22.2.0 • netapp cloud backup • netapp solidfire baseboard management controller firmware • netapp h300s firmware • netapp h500s firmware • netapp h700s firmware • netapp h300e firmware • netapp h500e firmware • netapp h700e firmware • netapp h410s firmware • netapp h410c firmware

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-787 Out-of-bounds Write weakness

References