Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback Current code blindly writes over the SWERR and the OVERFLOW bits. Write back the bits actually read instead so the driver avoids clobbering the OVERFLOW bit that comes after the register is read.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.6.0, < 5.10.32 |
References
- https://git.kernel.org/stable/c/02981a44a0e402089775416371bd2e0c935685f8Patch
- https://git.kernel.org/stable/c/a5ad12d5d69c63af289a37f05187a0c6fe93553dPatch
- https://git.kernel.org/stable/c/ea941ac294d75d0ace50797aebf0056f6f8f7a7fPatch
- https://git.kernel.org/stable/c/02981a44a0e402089775416371bd2e0c935685f8Patch
- https://git.kernel.org/stable/c/a5ad12d5d69c63af289a37f05187a0c6fe93553dPatch
- https://git.kernel.org/stable/c/ea941ac294d75d0ace50797aebf0056f6f8f7a7fPatch
FAQ
What is CVE-2021-46920?
CVE-2021-46920 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback Current code blindly writes over the SWERR and the OVERFLOW bit...
How severe is CVE-2021-46920?
CVE-2021-46920 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-46920?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.