• caglararli@hotmail.com
  • 05386281520

CVE-2021-47597 | Linux Kernel up to 5.4.167/5.10.87/5.15.10 lib/iov_iter.c inet_sk_diag_fill uninitialized pointer

Çağlar Arlı      -    18 Views

CVE-2021-47597 | Linux Kernel up to 5.4.167/5.10.87/5.15.10 lib/iov_iter.c inet_sk_diag_fill uninitialized pointer

A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.4.167/5.10.87/5.15.10. This affects the function inet_sk_diag_fill in the library lib/iov_iter.c. The manipulation leads to uninitialized pointer. This vulnerability is uniquely identified as CVE-2021-47597. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.