CVE - CVE-2021-46993

CVE-ID
CVE-2021-46993	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: sched: Fix out-of-bound access in uclamp Util-clamp places tasks in different buckets based on their clamp values for performance reasons. However, the size of buckets is currently computed using a rounding division, which can lead to an off-by-one error in some configurations. For instance, with 20 buckets, the bucket size will be 1024/20=51. A task with a clamp of 1024 will be mapped to bucket id 1024/51=20. Sadly, correct indexes are in range [0,19], hence leading to an out of bound memory access. Clamp the bucket id to fix the issue.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/3da3f804b82a0a382d523a21acf4cf3bb35f936d URL:https://git.kernel.org/stable/c/3da3f804b82a0a382d523a21acf4cf3bb35f936d MISC:https://git.kernel.org/stable/c/42ee47c7e3569d9a0e2cb5053c496d97d380472f URL:https://git.kernel.org/stable/c/42ee47c7e3569d9a0e2cb5053c496d97d380472f MISC:https://git.kernel.org/stable/c/687f523c134b7f0bd040ee1230f6d17990d54172 URL:https://git.kernel.org/stable/c/687f523c134b7f0bd040ee1230f6d17990d54172 MISC:https://git.kernel.org/stable/c/6d2f8909a5fabb73fe2a63918117943986c39b6c URL:https://git.kernel.org/stable/c/6d2f8909a5fabb73fe2a63918117943986c39b6c MISC:https://git.kernel.org/stable/c/f7347c85490b92dd144fa1fba9e1eca501656ab3 URL:https://git.kernel.org/stable/c/f7347c85490b92dd144fa1fba9e1eca501656ab3
Assigning CNA
kernel.org
Date Record Created
20240227	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240227)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)