cbcvebase.
CVE-2021-46934
published 2024-02-27

CVE-2021-46934: In the Linux kernel, the following vulnerability has been resolved: i2c: validate user data in compat ioctl Wrong user data may cause warning in…

PriorityP410low3.3CVSS 3.1
AVLACLPRLUINSUCNILAN
EPSS
0.23%
14.3th percentile
In the Linux kernel, the following vulnerability has been resolved: i2c: validate user data in compat ioctl Wrong user data may cause warning in i2c_transfer(), ex: zero msgs. Userspace should not be able to trigger warnings, so this patch adds validation checks for user data in compact ioctl to prevent reported warnings

Affected

15 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.15.15-1 (bookworm)linux 5.15.15-1 (bookworm)
linuxlinux——
linuxlinux>= 7d5cb45655f2e9e37ef75d18f50c0072ef14a38b < 407c8708fb1bf2d4afc5337ef50635cf540c364b407c8708fb1bf2d4afc5337ef50635cf540c364b
linuxlinux>= 7d5cb45655f2e9e37ef75d18f50c0072ef14a38b < 9e4a3f47eff476097e0c7faac04d1831fc70237d9e4a3f47eff476097e0c7faac04d1831fc70237d
linuxlinux>= 7d5cb45655f2e9e37ef75d18f50c0072ef14a38b < 8d31cbab4c295d7010ebb729e9d02d0e9cece18f8d31cbab4c295d7010ebb729e9d02d0e9cece18f
linuxlinux>= 7d5cb45655f2e9e37ef75d18f50c0072ef14a38b < f68599581067e8a5a8901ba9eb270b4519690e26f68599581067e8a5a8901ba9eb270b4519690e26
linuxlinux>= 7d5cb45655f2e9e37ef75d18f50c0072ef14a38b < bb436283e25aaf1533ce061605d23a9564447bdfbb436283e25aaf1533ce061605d23a9564447bdf
linuxlinux_kernel>= 0 < 5.10.92-15.10.92-1
linuxlinux_kernel>= 0 < 5.15.15-15.15.15-1
linuxlinux_kernel>= 0 < 5.15.15-15.15.15-1
linuxlinux_kernel>= 0 < 5.15.15-15.15.15-1
linuxlinux_kernel>= 4.15.0 < 4.19.2244.19.224
linuxlinux_kernel>= 4.20.0 < 5.4.1705.4.170
linuxlinux_kernel>= 5.11.0 < 5.15.135.15.13
linuxlinux_kernel>= 5.5.0 < 5.10.905.10.90

CVSS provenance

nvdv3.13.3LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
osv3.3LOW
vendor_debian3.3LOW
vendor_redhat3.3LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.