An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6. Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs because a certain comparison uses values that are not memory sizes.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Nov 29, 2021 | Oct 11, 2021 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade dtb-alUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-livepatch-5_3_18-24_93-defaultUpgrade reiserfs-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade dtb-broadcomUpgrade kgraft-patch-4_12_14-95_83-defaultUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade dlm-kmp-preemptUpgrade dtb-qcomUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-zteUpgrade kernel-azure-develUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade ocfs2-kmp-preemptUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-baseUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-develUpgrade kernel-debug-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-livepatch-4_12_14-197_102-defaultUpgrade kernel-sourceUpgrade cluster-md-kmp-preemptUpgrade kernel-preemptUpgrade dtb-alteraUpgrade kernel-preempt-develUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-source-vanillaUpgrade dtb-freescaleUpgrade kgraft-patch-4_12_14-122_98-defaultUpgrade dlm-kmp-64kbUpgrade kernel-livepatch-5_3_18-59_34-defaultUpgrade dtb-xilinxUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-azureUpgrade kselftests-kmp-preemptUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade kernel-preempt-livepatch-develUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade dtb-armUpgrade gfs2-kmp-preemptUpgrade reiserfs-kmp-defaultUpgrade kernel-default-kgraftUpgrade dtb-rockchipUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dtb-apmUpgrade kernel-debugUpgrade kernel-preempt-optionalUpgrade kernel-livepatch-4_12_14-150_78-defaultUpgrade kernel-vanillaUpgrade kernel-preempt-extraUpgrade kernel-default-livepatch-develUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade kernel-default-manUpgrade kernel-default-kgraft-develUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kernel-64kb-extraUpgrade dlm-kmp-default | Nov 9, 2021 | Oct 11, 2021 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1049-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-5.11.0-1023-raspi-nolpaeUpgrade linux-image-5.4.0-1026-gkeopUpgrade linux-image-dell300xUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.13.0-1011-raspi-nolpaeUpgrade linux-image-snapdragonUpgrade linux-image-oem-20.04cUpgrade linux-image-5.13.0-22-generic-64kUpgrade linux-image-5.11.0-1020-kvmUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-5.11.0-41-generic-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-162-generic-lpaeUpgrade linux-image-5.13.0-1006-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-4.15.0-1030-dell300xUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-virtualUpgrade linux-image-5.13.0-22-genericUpgrade linux-image-5.4.0-90-lowlatencyUpgrade linux-image-4.15.0-1098-raspi2Upgrade linux-image-5.13.0-1011-raspiUpgrade linux-image-4.15.0-1126-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-162-lowlatencyUpgrade linux-image-5.13.0-22-lowlatencyUpgrade linux-image-5.4.0-1055-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.11.0-41-genericUpgrade linux-image-4.15.0-1111-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-5.11.0-1023-raspiUpgrade linux-image-5.13.0-1020-oemUpgrade linux-image-5.4.0-1057-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.11.0-41-generic-lpaeUpgrade linux-image-4.15.0-1115-snapdragonUpgrade linux-image-5.4.0-90-genericUpgrade linux-image-5.4.0-1063-azureUpgrade linux-image-oracleUpgrade linux-image-5.13.0-1008-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1007-ibmUpgrade linux-image-5.11.0-1023-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1083-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.11.0-1022-awsUpgrade linux-image-5.11.0-1022-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.13.0-1010-oracleUpgrade linux-image-5.13.0-1007-gcpUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1115-awsUpgrade linux-image-4.15.0-162-genericUpgrade linux-image-5.4.0-90-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-5.11.0-41-lowlatencyUpgrade linux-image-4.15.0-1102-kvmUpgrade linux-image-5.13.0-1007-awsUpgrade linux-image-5.13.0-22-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.11.0-1022-azureUpgrade linux-image-azureUpgrade linux-image-5.4.0-1059-aws | Nov 9, 2021 | Oct 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub