CVEvulnerability
CVE-2021-46943
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-02-27
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-131
Description
In the Linux kernel, the following vulnerability has been resolved:
media: staging/intel-ipu3: Fix set_fmt error handling
If there in an error during a set_fmt, do not overwrite the previous
sizes with the invalid config.
Without this patch, v4l2-compliance ends up allocating 4GiB of RAM and
causing the following OOPs
[ 38.662975] ipu3-imgu 0000:00:05.0: swiotlb buffer is full (sz: 4096 bytes)
[ 38.662980] DMA: Out of SW-IOMMU space for 4096 bytes at device 0000:00:05.0
[ 38.663010] general protection fault: 0000 [#1] PREEMPT SMP
Affected configurations
• linux linux kernel (>= 5.2.0 < 5.4.118)
• linux linux kernel (>= 5.5.0 < 5.10.36)
• linux linux kernel (>= 5.11.0 < 5.11.20)
• linux linux kernel (>= 5.12.0 < 5.12.3)
Related
Weakness · CWE (1)
- CWE-131 Incorrect Calculation of Buffer Size weakness
References
- https://git.kernel.org/stable/c/34892ea938387d83ffcfb7775ec55f0f80767916 Patch
- https://git.kernel.org/stable/c/6fb617e37a39db0a3eca4489431359d0bdf3b9bc Patch
- https://git.kernel.org/stable/c/a03fb1e8a110658215a4cefc3e2ad53279e496a6 Patch
- https://git.kernel.org/stable/c/ad91849996f9dd79741a961fd03585a683b08356 Patch
- https://git.kernel.org/stable/c/c6b81b897f6f9445d57f8d47c4e060ec21556137 Patch
- https://git.kernel.org/stable/c/34892ea938387d83ffcfb7775ec55f0f80767916 Patch
- https://git.kernel.org/stable/c/6fb617e37a39db0a3eca4489431359d0bdf3b9bc Patch
- https://git.kernel.org/stable/c/a03fb1e8a110658215a4cefc3e2ad53279e496a6 Patch
- https://git.kernel.org/stable/c/ad91849996f9dd79741a961fd03585a683b08356 Patch
- https://git.kernel.org/stable/c/c6b81b897f6f9445d57f8d47c4e060ec21556137 Patch