2024-03-01 00:55:35 +00:00
{
"id" : "CVE-2021-47055" ,
"sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"published" : "2024-02-29T23:15:07.473" ,
2025-01-09 17:04:14 +00:00
"lastModified" : "2025-01-09T15:34:43.780" ,
"vulnStatus" : "Analyzed" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2024-03-01 00:55:35 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: require write permissions for locking and badblock ioctls\n\nMEMLOCK, MEMUNLOCK and OTPLOCK modify protection bits. Thus require\nwrite permission. Depending on the hardware MEMLOCK might even be\nwrite-once, e.g. for SPI-NOR flashes with their WP# tied to GND. OTPLOCK\nis always write-once.\n\nMEMSETBADBLOCK modifies the bad block table."
2024-03-01 15:01:18 +00:00
} ,
{
"lang" : "es" ,
"value" : "En el kernel de Linux se ha solucionado la siguiente vulnerabilidad: mtd: requiere permisos de escritura para bloqueo y badblock ioctls MEMLOCK, MEMUNLOCK y OTPLOCK modifican los bits de protecci\u00f3n. Por lo tanto, requiere permiso de escritura. Dependiendo del hardware, MEMLOCK podr\u00eda incluso ser de escritura \u00fanica, por ejemplo, para flashes SPI-NOR con su WP# vinculado a GND. OTPLOCK siempre se escribe una vez. MEMSETBADBLOCK modifica la tabla de bloques defectuosos."
2024-03-01 00:55:35 +00:00
}
] ,
2025-01-09 17:04:14 +00:00
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" ,
"baseScore" : 5.5 ,
"baseSeverity" : "MEDIUM" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "HIGH"
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 3.6
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-667"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.4.233" ,
"versionEndExcluding" : "4.4.269" ,
"matchCriteriaId" : "63C8F509-A0B6-46B2-A2D6-50734673A291"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.9.233" ,
"versionEndExcluding" : "4.9.269" ,
"matchCriteriaId" : "1CB50146-C09E-4A70-8BFE-96570CF2A644"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.14.194" ,
"versionEndExcluding" : "4.14.233" ,
"matchCriteriaId" : "0BE45F77-85DC-498D-9B85-3B7F8790BB21"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.19.139" ,
"versionEndExcluding" : "4.19.191" ,
"matchCriteriaId" : "2CC9608F-4897-4324-9242-25D80E1E4240"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.4.58" ,
"versionEndExcluding" : "5.4.119" ,
"matchCriteriaId" : "5693285C-D52F-4C04-9AC6-CDA998BEDE85"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.9" ,
"versionEndExcluding" : "5.10.37" ,
"matchCriteriaId" : "BFD29FB7-96E7-40B2-A1A7-AFA8D43EC498"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.11" ,
"versionEndExcluding" : "5.11.21" ,
"matchCriteriaId" : "8CBB94EC-EC33-4464-99C5-03E5542715F0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.12" ,
"versionEndExcluding" : "5.12.4" ,
"matchCriteriaId" : "D8C7052F-1B7B-4327-9C2B-84EBF3243838"
}
]
}
]
}
] ,
2024-03-01 00:55:35 +00:00
"references" : [
{
"url" : "https://git.kernel.org/stable/c/077259f5e777c3c8821f6b41dee709fcda27306b" ,
2025-01-09 17:04:14 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-03-01 00:55:35 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/1e97743fd180981bef5f01402342bb54bf1c6366" ,
2025-01-09 17:04:14 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-03-01 00:55:35 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/5880afefe0cb9b2d5e801816acd58bfe91a96981" ,
2025-01-09 17:04:14 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-03-01 00:55:35 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/75ed985bd6c8ac1d4e673e93ea9d96c9908c1d37" ,
2025-01-09 17:04:14 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-03-01 00:55:35 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/7b6552719c0ccbbea29dde4be141da54fdb5877e" ,
2025-01-09 17:04:14 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-03-01 00:55:35 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/9625b00cac6630479c0ff4b9fafa88bee636e1f0" ,
2025-01-09 17:04:14 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-03-01 00:55:35 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/a08799d3e8c8088640956237c183f83463c39668" ,
2025-01-09 17:04:14 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-03-01 00:55:35 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/f4d28d8b9b0e7c4ae04214b8d7e0b0466ec6bcaf" ,
2025-01-09 17:04:14 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-03-01 00:55:35 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/f73b29819c6314c0ba8b7d5892dfb03487424bee" ,
2025-01-09 17:04:14 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/077259f5e777c3c8821f6b41dee709fcda27306b" ,
2025-01-09 17:04:14 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/1e97743fd180981bef5f01402342bb54bf1c6366" ,
2025-01-09 17:04:14 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/5880afefe0cb9b2d5e801816acd58bfe91a96981" ,
2025-01-09 17:04:14 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/75ed985bd6c8ac1d4e673e93ea9d96c9908c1d37" ,
2025-01-09 17:04:14 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/7b6552719c0ccbbea29dde4be141da54fdb5877e" ,
2025-01-09 17:04:14 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/9625b00cac6630479c0ff4b9fafa88bee636e1f0" ,
2025-01-09 17:04:14 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/a08799d3e8c8088640956237c183f83463c39668" ,
2025-01-09 17:04:14 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/f4d28d8b9b0e7c4ae04214b8d7e0b0466ec6bcaf" ,
2025-01-09 17:04:14 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/f73b29819c6314c0ba8b7d5892dfb03487424bee" ,
2025-01-09 17:04:14 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2024-03-01 00:55:35 +00:00
}
]
}