CVE-2021-46943 media: staging/intel-ipu3: Fix set_fmt error handling
A flaw in the Intel IPU3 media driver allows a local attacker to trigger a system crash by causing excessive memory allocation during format setting errors.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-46943?
CVE-2021-46943 is a high-severity denial of service vulnerability in Linux kernel, published on 27 Feb 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
media: staging/intel-ipu3: Fix set_fmt error handling
If there in an error during a set_fmt, do not overwrite the previous sizes with the invalid config.
Without this patch, v4l2-compliance ends up allocating 4GiB of RAM and causing the following OOPs
[ 38.662975] ipu3-imgu 0000:00:05.0: swiotlb buffer is full (sz: 4096 bytes) [ 38.662980] DMA: Out of SW-IOMMU space for 4096 bytes at device 0000:00:05.0 [ 38.663010] general protection fault: 0000 [#1] PREEMPT SMP
Weakness: CWE-131
Which versions are affected by CVE-2021-46943?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2021-46943?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2021-46943 being exploited?
There is no known exploitation of CVE-2021-46943 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2021-46943, GHSA-p45j-q5hm-cc64, UBUNTU-CVE-2021-46943.