4.0
Medium
CVE-2021-21781 An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54
Description
An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process’s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | Versions not published |
References
- talosintelligence.com talosintelligence.com
- www.oracle.com www.oracle.com
Timeline
- Published
- Last modified
Other CVEs of Linux kernel
The 47 CVEs of Linux kernel →
CVE-2023-3220
An issue was discovered in the Linux kernel through 6.1-rc8
5.5
Medium
CVE-2023-1652
A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel
7.1
High
CVE-2023-1077
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as…
Not rated
CVE-2023-1078
A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol
7.8
High