CVE-2021-30002 PUBLISHED

An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. video_usercopy in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, aka CID-fb18802a338b.

EPSS 0.03% · 8.5th percentile

Risk Scores

EPSS Score
0.03%
8.5th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:FIPS:18.04:LTSlinux-gcp-fips0, 4.15.0-1001.1
Ubuntu:18.04:LTSlinux-raspi24.15.0-1021.23, 4.15.0-1020.22, 4.15.0-1018.19
Ubuntu:18.04:LTSlinux-snapdragon4.15.0-1084.92, 4.15.0-1101.110, 4.15.0-1100.109
Ubuntu:20.04:LTSlinux-oem-5.65.6.0-1052.56, 5.6.0-1053.57, 0
Ubuntu:16.04:LTSlinux-kvm4.4.0-1004.9, 0, 4.4.0-1090.99
Ubuntu:18.04:LTSlinux-hwe0, 5.3.0-76.72, 5.3.0-75.71
Ubuntu:18.04:LTSlinux-oracle4.15.0-1025.28, 4.15.0-1022.25, 4.15.0-1021.23
Ubuntu:18.04:LTSlinux-oracle-5.35.3.0-1030.32~18.04.1, 5.3.0-1028.30~18.04.1, 5.3.0-1027.29~18.04.1
Ubuntu:Pro:FIPS-updates:18.04:LTSlinux-fips4.15.0-1048.55, 4.15.0-1049.56, 4.15.0-1050.58
Ubuntu:20.04:LTSlinux-raspi20, 5.3.0-1007.8, 5.3.0-1014.16
Ubuntu:18.04:LTSlinux-oracle-5.45.4.0-1028.29~18.04.1, 5.4.0-1043.46~18.04.1, 5.4.0-1042.45~18.04.1
Ubuntu:Pro:16.04:LTSlinux-oracle4.15.0-1056.61~16.04.1, 4.15.0-1054.58~16.04.1, 4.15.0-1053.57~16.04.1
Ubuntu:20.04:LTSlinux-gcp5.4.0-1037.40, 5.4.0-1042.45, 5.4.0-1041.44
Ubuntu:20.04:LTSlinux-riscv5.4.0-33.37, 5.4.0-30.34, 5.4.0-28.32
Ubuntu:Pro:FIPS:20.04:LTSlinux-fips5.4.0-1007.8, 0
Ubuntu:18.04:LTSlinux4.15.0-42.45, 0, 4.13.0-16.19
Ubuntu:20.04:LTSlinux-oem-5.105.10.0-1014.15, 5.10.0-1013.14, 5.10.0-1019.20
Ubuntu:20.04:LTSlinux-oracle5.4.0-1022.22, 5.4.0-1021.21, 5.4.0-1019.19
Ubuntu:20.04:LTSlinux-aws5.4.0-1009.9, 5.4.0-1007.7, 5.4.0-1005.5
Ubuntu:18.04:LTSlinux-oracle-5.05.0.0-1009.14~18.04.1, 5.0.0-1008.13~18.04.1, 5.0.0-1007.12~18.04.1

…and 57 more

Timeline

References

Open in Interactive Console →