An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6. Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs because a certain comparison uses values that are not memory sizes.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Nov 29, 2021 | Oct 11, 2021 |
| Suse | — | Upgrade kernel-default-optionalUpgrade dtb-caviumUpgrade kernel-vanilla-develUpgrade kgraft-patch-4_12_14-122_98-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-develUpgrade kernel-livepatch-5_3_18-24_93-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade cluster-md-kmp-preemptUpgrade kernel-debug-baseUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade kernel-preemptUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade kernel-default-livepatchUpgrade dtb-alUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade kernel-vanilla-baseUpgrade kgraft-patch-4_12_14-95_83-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade dlm-kmp-preemptUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade kernel-default-develUpgrade kernel-kvmsmall-baseUpgrade kernel-livepatch-5_3_18-59_34-defaultUpgrade dlm-kmp-64kbUpgrade dtb-zteUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-zfcpdump-manUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade ocfs2-kmp-preemptUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-livepatch-4_12_14-197_102-defaultUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-preempt-develUpgrade reiserfs-kmp-preemptUpgrade kselftests-kmp-64kbUpgrade kernel-azureUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade kselftests-kmp-preemptUpgrade dtb-nvidiaUpgrade kernel-default-manUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-preempt-optionalUpgrade kernel-vanillaUpgrade kernel-preempt-extraUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade kernel-debug-develUpgrade kernel-docsUpgrade dtb-mediatekUpgrade kernel-preempt-livepatch-develUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade kernel-default-kgraftUpgrade dtb-armUpgrade kernel-default-extraUpgrade gfs2-kmp-preemptUpgrade dtb-apmUpgrade kernel-symsUpgrade dtb-marvellUpgrade kernel-debugUpgrade dtb-renesasUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-livepatch-4_12_14-150_78-defaultUpgrade kernel-obs-qaUpgrade kernel-default-kgraft-devel | Nov 9, 2021 | Oct 11, 2021 |
| Ubuntu | — | Upgrade linux-image-5.13.0-1010-oracleUpgrade linux-image-4.15.0-1083-oracleUpgrade linux-image-5.13.0-1007-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.11.0-1022-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-90-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1102-kvmUpgrade linux-image-oracleUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1007-ibmUpgrade linux-image-5.11.0-1022-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-5.11.0-41-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-5.11.0-1022-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.13.0-1008-azureUpgrade linux-image-4.15.0-1115-snapdragonUpgrade linux-image-5.13.0-22-generic-lpaeUpgrade linux-image-5.11.0-1023-gcpUpgrade linux-image-4.15.0-162-genericUpgrade linux-image-5.4.0-1059-awsUpgrade linux-image-awsUpgrade linux-image-5.4.0-1063-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-1115-awsUpgrade linux-image-5.13.0-1007-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-90-genericUpgrade linux-image-5.11.0-41-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1111-gcpUpgrade linux-image-5.4.0-90-lowlatencyUpgrade linux-image-5.13.0-1020-oemUpgrade linux-image-genericUpgrade linux-image-5.4.0-1055-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1026-gkeopUpgrade linux-image-4.15.0-1030-dell300xUpgrade linux-image-5.11.0-1020-kvmUpgrade linux-image-gke-5.4Upgrade linux-image-5.13.0-22-generic-64kUpgrade linux-image-snapdragonUpgrade linux-image-5.11.0-1023-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-5.13.0-1011-raspi-nolpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-dell300xUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.13.0-22-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-generic-64kUpgrade linux-image-5.11.0-41-generic-64kUpgrade linux-image-5.13.0-1011-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-5.13.0-22-genericUpgrade linux-image-4.15.0-162-generic-lpaeUpgrade linux-image-4.15.0-1126-azureUpgrade linux-image-4.15.0-1098-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.11.0-41-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.11.0-1023-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1057-gcpUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-162-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-5.13.0-1006-kvmUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1049-kvmUpgrade linux-image-gcp | Nov 9, 2021 | Oct 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub