CVE - CVE-2021-47040

CVE-ID
CVE-2021-47040	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix overflows checks in provide buffers Colin reported before possible overflow and sign extension problems in io_provide_buffers_prep(). As Linus pointed out previous attempt did nothing useful, see d81269fecb8ce ("io_uring: fix provide_buffers sign extension"). Do that with help of check_<op>_overflow helpers. And fix struct io_provide_buf::len type, as it doesn't make much sense to keep it signed.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/38134ada0ceea3e848fe993263c0ff6207fd46e7 URL:https://git.kernel.org/stable/c/38134ada0ceea3e848fe993263c0ff6207fd46e7 MISC:https://git.kernel.org/stable/c/51bf90901952aaac564bbdb36b2b503050c53dd9 URL:https://git.kernel.org/stable/c/51bf90901952aaac564bbdb36b2b503050c53dd9 MISC:https://git.kernel.org/stable/c/84b8c266c4bfe9ed5128e13253c388deb74b1b03 URL:https://git.kernel.org/stable/c/84b8c266c4bfe9ed5128e13253c388deb74b1b03 MISC:https://git.kernel.org/stable/c/cbbc13b115b8f18e0a714d89f87fbdc499acfe2d URL:https://git.kernel.org/stable/c/cbbc13b115b8f18e0a714d89f87fbdc499acfe2d
Assigning CNA
kernel.org
Date Record Created
20240227	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240227)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)