CVE - CVE-2021-47159

CVE-ID
CVE-2021-47159	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix a crash if ->get_sset_count() fails If ds->ops->get_sset_count() fails then it "count" is a negative error code such as -EOPNOTSUPP. Because "i" is an unsigned int, the negative error code is type promoted to a very high value and the loop will corrupt memory until the system crashes. Fix this by checking for error codes and changing the type of "i" to just int.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0f2cb08c57edefb0e7b5045e0e3e9980a3d3aa37 URL:https://git.kernel.org/stable/c/0f2cb08c57edefb0e7b5045e0e3e9980a3d3aa37 MISC:https://git.kernel.org/stable/c/7b22466648a4f8e3e94f57ca428d1531866d1373 URL:https://git.kernel.org/stable/c/7b22466648a4f8e3e94f57ca428d1531866d1373 MISC:https://git.kernel.org/stable/c/a269333fa5c0c8e53c92b5a28a6076a28cde3e83 URL:https://git.kernel.org/stable/c/a269333fa5c0c8e53c92b5a28a6076a28cde3e83 MISC:https://git.kernel.org/stable/c/caff86f85512b8e0d9830e8b8b0dfe13c68ce5b6 URL:https://git.kernel.org/stable/c/caff86f85512b8e0d9830e8b8b0dfe13c68ce5b6 MISC:https://git.kernel.org/stable/c/ce5355f140a7987011388c7e30c4f8fbe180d3e8 URL:https://git.kernel.org/stable/c/ce5355f140a7987011388c7e30c4f8fbe180d3e8
Assigning CNA
kernel.org
Date Record Created
20240325	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240325)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)