An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6. Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs because a certain comparison uses values that are not memory sizes.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Nov 29, 2021 | Oct 11, 2021 |
| Suse | — | Upgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade kernel-docsUpgrade dtb-armUpgrade kernel-macrosUpgrade cluster-md-kmp-preemptUpgrade dlm-kmp-preemptUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-preemptUpgrade dtb-alteraUpgrade kernel-preempt-develUpgrade gfs2-kmp-azureUpgrade kernel-sourceUpgrade dtb-freescaleUpgrade kernel-debug-baseUpgrade kernel-vanilla-develUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-preemptUpgrade kgraft-patch-4_12_14-122_98-defaultUpgrade kernel-livepatch-5_3_18-59_34-defaultUpgrade dtb-caviumUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-livepatch-5_3_18-24_93-defaultUpgrade kernel-vanilla-baseUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kbUpgrade reiserfs-kmp-preemptUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade dtb-alUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-baseUpgrade kernel-azure-develUpgrade kernel-zfcpdump-manUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade kernel-preempt-extraUpgrade gfs2-kmp-preemptUpgrade kernel-default-kgraft-develUpgrade kselftests-kmp-preemptUpgrade kernel-default-manUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade dtb-amdUpgrade dtb-amlogicUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade dtb-apmUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-livepatch-4_12_14-150_78-defaultUpgrade kernel-preempt-optionalUpgrade dtb-hisiliconUpgrade kernel-vanillaUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade dtb-renesasUpgrade reiserfs-kmp-azureUpgrade kernel-default-kgraftUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extra | Nov 9, 2021 | Oct 11, 2021 |
| Ubuntu | — | Upgrade linux-image-4.15.0-162-genericUpgrade linux-image-5.13.0-1008-azureUpgrade linux-image-5.4.0-90-genericUpgrade linux-image-4.15.0-1115-snapdragonUpgrade linux-image-5.11.0-1022-azureUpgrade linux-image-5.4.0-1063-azureUpgrade linux-image-4.15.0-1115-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1059-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1102-kvmUpgrade linux-image-4.15.0-1083-oracleUpgrade linux-image-5.11.0-41-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1007-ibmUpgrade linux-image-5.13.0-22-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-5.4.0-90-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-5.11.0-41-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-5.11.0-1022-oracleUpgrade linux-image-5.13.0-1007-awsUpgrade linux-image-5.11.0-1023-gcpUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.13.0-1010-oracleUpgrade linux-image-oracleUpgrade linux-image-5.13.0-1007-gcpUpgrade linux-image-5.11.0-1022-awsUpgrade linux-image-5.13.0-22-genericUpgrade linux-image-snapdragonUpgrade linux-image-gkeopUpgrade linux-image-5.13.0-1006-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1098-raspi2Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-162-generic-lpaeUpgrade linux-image-5.13.0-1011-raspiUpgrade linux-image-5.11.0-41-generic-64kUpgrade linux-image-oemUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-90-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1026-gkeopUpgrade linux-image-gke-5.4Upgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1030-dell300xUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.13.0-22-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.13.0-1020-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.11.0-41-genericUpgrade linux-image-generic-64kUpgrade linux-image-5.13.0-1011-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.13.0-22-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1111-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.11.0-1023-raspi-nolpaeUpgrade linux-image-4.15.0-162-lowlatencyUpgrade linux-image-5.11.0-1020-kvmUpgrade linux-image-dell300xUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.11.0-1023-raspiUpgrade linux-image-5.4.0-1055-gkeUpgrade linux-image-5.4.0-1057-gcpUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1049-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1126-azure | Nov 9, 2021 | Oct 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub