CVE-2021-47336 smackfs: restrict bytes count in smk_set_cipso()
A missing bounds check in the Linux kernel SMACK filesystem allows an attacker to trigger a denial of service via crafted input.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-47336?
CVE-2021-47336 is a high-severity vulnerability in Linux kernel, published on 21 May 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
smackfs: restrict bytes count in smk_set_cipso()
Oops, I failed to update subject line.
From 07571157c91b98ce1a4aa70967531e64b78e8346 Mon Sep 17 00:00:00 2001 Date: Mon, 12 Apr 2021 22:25:06 +0900 Subject: [PATCH] smackfs: restrict bytes count in smk_set_cipso()
Commit 7ef4c19d245f3dc2 ("smackfs: restrict bytes count in smackfs write functions") missed that count > SMK_CIPSOMAX check applies to only format == SMK_FIXED24_FMT case.
Which versions are affected by CVE-2021-47336?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2021-47336?
Apply the vendor's patch.
Is CVE-2021-47336 being exploited?
There is no known exploitation of CVE-2021-47336 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2021-47336, GHSA-h3hv-fpf3-c5jm, UBUNTU-CVE-2021-47336.