Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2021-47055

mtd: require write permissions for locking and badblock ioctls

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.4.269, 4.9.269, 4.14.233, 4.19.191, 5.4.119, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: mtd: require write permissions for locking and badblock ioctls MEMLOCK, MEMUNLOCK and OTPLOCK modify protection bits. Thus require write permission. Depending on the hardware MEMLOCK might even be write-once, e.g. for SPI-NOR flashes with their WP# tied to GND. OTPLOCK is always write-once. MEMSETBADBLOCK modifies the bad block table.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 4.4.233 · fixed in 4.4.269; From 4.9.233 · fixed in 4.9.269; From 4.14.194 · fixed in 4.14.233; From 4.19.139 · fixed in 4.19.191; From 5.4.58 · fixed in 5.4.119; From 5.7.15 · fixed in 5.8; From 5.8.1 · fixed in 5.9

  • Linux Linux

    5.9

References 9

git.kernel.org