In the Linux kernel, the following vulnerability has been resolved:

i2c: validate user data in compat ioctl

Wrong user data may cause warning in i2c_transfer(), ex: zero msgs.
Userspace should not be able to trigger warnings, so this patch adds
validation checks for user data in compact ioctl to prevent reported
warnings

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00015.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
7d5cb45655f2e9e37ef75d18f50c0072ef14a38b affected < 407c8708fb1bf2d4afc5337ef50635cf540c364b
7d5cb45655f2e9e37ef75d18f50c0072ef14a38b affected < 9e4a3f47eff476097e0c7faac04d1831fc70237d
7d5cb45655f2e9e37ef75d18f50c0072ef14a38b affected < 8d31cbab4c295d7010ebb729e9d02d0e9cece18f
7d5cb45655f2e9e37ef75d18f50c0072ef14a38b affected < f68599581067e8a5a8901ba9eb270b4519690e26
7d5cb45655f2e9e37ef75d18f50c0072ef14a38b affected < bb436283e25aaf1533ce061605d23a9564447bdf
Linux Linux affected
Version Status Constraints
4.15 affected —
0 unaffected < 4.15
4.19.224 unaffected ≤ 4.19.*
5.4.170 unaffected ≤ 5.4.*
5.10.90 unaffected ≤ 5.10.*
5.15.13 unaffected ≤ 5.15.*
5.16 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.5.1.rt7.346.el8_10 cpe:/a:redhat:enterprise_linux:8::nfv RHSA-2024:3627 2024-06-05T00:00:00Z
kernel-0:4.18.0-553.5.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:3618 2024-06-05T00:00:00Z

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Redhat Subscribe
Enterprise Linux Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/407c8708fb1bf2d4afc5337ef50635cf540c364b cve-icon cve-icon
https://git.kernel.org/stable/c/8d31cbab4c295d7010ebb729e9d02d0e9cece18f cve-icon cve-icon
https://git.kernel.org/stable/c/9e4a3f47eff476097e0c7faac04d1831fc70237d cve-icon cve-icon
https://git.kernel.org/stable/c/bb436283e25aaf1533ce061605d23a9564447bdf cve-icon cve-icon
https://git.kernel.org/stable/c/f68599581067e8a5a8901ba9eb270b4519690e26 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024022750-CVE-2021-46934-79c8@gregkh/T/#u cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2021-46934 cve-icon
https://www.cve.org/CVERecord?id=CVE-2021-46934 cve-icon
History

Mon, 04 Nov 2024 12:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T07:00:38.333Z

Reserved: 2024-02-25T13:45:52.720Z

Link: CVE-2021-46934

cve-icon Vulnrichment

Updated: 2024-08-04T05:17:42.874Z

cve-icon NVD

Status : Modified

Published: 2024-02-27T10:15:07.877

Modified: 2024-11-21T06:34:58.080

Link: CVE-2021-46934

cve-icon Redhat

Severity : Low

Publid Date: 2024-02-27T00:00:00Z

Links: CVE-2021-46934 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses