In the Linux kernel, the following vulnerability has been resolved:

media: staging/intel-ipu3: Fix set_fmt error handling

If there in an error during a set_fmt, do not overwrite the previous
sizes with the invalid config.

Without this patch, v4l2-compliance ends up allocating 4GiB of RAM and
causing the following OOPs

[ 38.662975] ipu3-imgu 0000:00:05.0: swiotlb buffer is full (sz: 4096 bytes)
[ 38.662980] DMA: Out of SW-IOMMU space for 4096 bytes at device 0000:00:05.0
[ 38.663010] general protection fault: 0000 [#1] PREEMPT SMP

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00038.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
6d5f26f2e045f2377b524516194657c00efbbce8 affected
< a03fb1e8a110658215a4cefc3e2ad53279e496a6
6d5f26f2e045f2377b524516194657c00efbbce8 affected
< c6b81b897f6f9445d57f8d47c4e060ec21556137
6d5f26f2e045f2377b524516194657c00efbbce8 affected
< 34892ea938387d83ffcfb7775ec55f0f80767916
6d5f26f2e045f2377b524516194657c00efbbce8 affected
< 6fb617e37a39db0a3eca4489431359d0bdf3b9bc
6d5f26f2e045f2377b524516194657c00efbbce8 affected
< ad91849996f9dd79741a961fd03585a683b08356
Linux Linux affected
Version Status Constraints
5.2 affected
—
0 unaffected
< 5.2
5.4.118 unaffected
≤ 5.4.*
5.10.36 unaffected
≤ 5.10.*
5.11.20 unaffected
≤ 5.11.*
5.12.3 unaffected
≤ 5.12.*
5.13 unaffected
≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

No data.

Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/34892ea938387d83ffcfb7775ec55f0f80767916 cve-icon cve-icon
https://git.kernel.org/stable/c/6fb617e37a39db0a3eca4489431359d0bdf3b9bc cve-icon cve-icon
https://git.kernel.org/stable/c/a03fb1e8a110658215a4cefc3e2ad53279e496a6 cve-icon cve-icon
https://git.kernel.org/stable/c/ad91849996f9dd79741a961fd03585a683b08356 cve-icon cve-icon
https://git.kernel.org/stable/c/c6b81b897f6f9445d57f8d47c4e060ec21556137 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/20240227184057.2368370-8-gregkh@linuxfoundation.org/T/#u cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2021-46943 cve-icon
https://www.cve.org/CVERecord?id=CVE-2021-46943 cve-icon
History

Mon, 04 Nov 2024 12:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T07:00:53.807Z

Reserved: 2024-02-25T13:45:52.721Z

Link: CVE-2021-46943

cve-icon Vulnrichment

Updated: 2024-08-04T05:17:42.870Z

cve-icon NVD

Status : Modified

Published: 2024-02-27T19:04:06.063

Modified: 2024-11-21T06:34:59.360

Link: CVE-2021-46943

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-02-27T00:00:00Z

Links: CVE-2021-46943 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses