<p>There is no fixed version for <code>RHEL:9</code> <code>kernel-zfcpdump-modules-internal</code>.</p>

Out-of-bounds Write Affecting kernel-zfcpdump-modules-internal package, versions *

Threat Intelligence

0.07% (33^rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk ID SNYK-RHEL9-KERNELZFCPDUMPMODULESINTERNAL-5759944
published 20 Nov 2021
disclosed 15 Nov 2021

Report a new vulnerability Found a mistake?

Introduced: 15 Nov 2021

CVE-2021-43975 Open this link in a new tab CWE-787 Open this link in a new tab

How to fix?

There is no fixed version for RHEL:9 kernel-zfcpdump-modules-internal.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kernel-zfcpdump-modules-internal package and not the kernel-zfcpdump-modules-internal package as distributed by RHEL. See How to fix? for RHEL:9 relevant fixed versions and status.

In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value.

References

CVSS Scores

version 3.1

Out-of-bounds Write Affecting kernel-zfcpdump-modules-internal package, versions *

Severity

Based on Red Hat Enterprise Linux security rating