CVE-2021-35039 Security feature bypass in n/a

High 7.8 Published 7 Jul 2021 Updated 4 Aug 2024

Attackers can bypass kernel module signature enforcement when CONFIG_MODULE_SIG is disabled, allowing unsigned modules to load despite strict settings.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2021-35039?

CVE-2021-35039 is a high-severity vulnerability in Debian Debian Linux, published on 7 Jul 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, does not occur for a module.sig_enforce=1 command-line argument.

Weakness: CWE-347

Which versions are affected by CVE-2021-35039?

It affects 2 products.

Products include Debian Debian Linux, Linux kernel.

How do I fix CVE-2021-35039?

Apply the vendor's patch.

Is CVE-2021-35039 being exploited?

There is no known exploitation of CVE-2021-35039 in the wild and no public exploit code.

All Debian Debian Linux vulnerabilities

Sources

Also known as AZL-6570, DEBIAN-CVE-2021-35039, GHSA-jf73-g393-6jw9, UBUNTU-CVE-2021-35039.