VDB
UBUNTU-CVE-2021-47485
UBUNTU-CVE-2021-47485
PUBLISHED
CVSS 7.800000190734863 HIGH
In the Linux kernel, the following vulnerability has been resolved: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields Overflowing either addrlimit or bytes_togo can allow userspace to trigger a buffer overflow of kernel memory. Check for overflows in all the places doing math on user controlled buffers.
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:20.04:LTS | linux-gke | 5.4.0-1102.109, 5.4.0-1103.110, 5.4.0-1104.111 |
| Ubuntu:20.04:LTS | linux-kvm | 5.4.0-1028.29, 5.4.0-1024.24, 5.4.0-1023.23 |
| Ubuntu:18.04:LTS | linux-gkeop-5.4 | 5.4.0-1018.19~18.04.1, 5.4.0-1043.44~18.04.1, 5.4.0-1040.41~18.04.1 |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | linux-gcp-fips | 4.15.0-2020.22, 4.15.0-2019.21, 4.15.0-2018.20 |
| Ubuntu:20.04:LTS | linux-intel-5.13 | 5.13.0-1014.15, 5.13.0-1017.19, 5.13.0-1009.9 |
| Ubuntu:20.04:LTS | linux-azure-5.11 | 5.11.0-1017.18~20.04.1, 5.11.0-1020.21~20.04.1, 0 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | 5.19.0-46.47~22.04.1, 0, 5.19.0-41.42~22.04.1 |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | linux-gcp-fips | 5.4.0-1021.21+fips1, 0 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | 5.19.0-1015.15~22.04.1, 5.19.0-1014.14~22.04.1, 5.19.0-1013.13~22.04.1 |
| Ubuntu:20.04:LTS | linux-aws | 5.4.0-1022.22, 5.4.0-1020.20, 5.4.0-1018.18 |
| Ubuntu:Pro:FIPS:16.04:LTS | linux-fips | 4.4.0-1002.2, 4.4.0-1001.1, 0 |
| Ubuntu:18.04:LTS | linux-aws-5.4 | 5.4.0-1043.45~18.04.1, 5.4.0-1060.63~18.04.1, 5.4.0-1059.62~18.04.1 |
| Ubuntu:Pro:16.04:LTS | linux-gcp | 4.15.0-1099.112~16.04.1, 4.15.0-1100.113~16.04.1, 4.15.0-1103.116~16.04.1 |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | linux-aws-fips | 4.15.0-2000.4, 4.15.0-2060.62, 4.15.0-2059.61 |
| Ubuntu:18.04:LTS | linux-gcp | 4.15.0-1024.25, 4.15.0-1009.9, 4.15.0-1023.24 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | 5.19.0-1027.28~22.04.1, 5.19.0-1020.21~22.04.1, 5.19.0-1019.20~22.04.1 |
| Ubuntu:20.04:LTS | linux-gcp-5.11 | 0, 5.11.0-1017.19~20.04.1, 5.11.0-1020.22~20.04.1 |
| Ubuntu:18.04:LTS | linux-azure-4.15 | 4.15.0-1103.114, 4.15.0-1106.118, 4.15.0-1108.120 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | 5.19.0-1020.22~22.04.1, 5.19.0-1019.21~22.04.1, 5.19.0-1018.19~22.04.1 |
| Ubuntu:Pro:FIPS:18.04:LTS | linux-gcp-fips | 4.15.0-1001.1, 0 |
…and 99 more
Timeline
- May 22, 2024 CVE Published
- Oct 28, 2026 CVE Updated
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Security Advisory
- Oct 30, 2026 Security Advisory
References
- https://ubuntu.com/security/CVE-2021-47485 report
- https://www.cve.org/CVERecord?id=CVE-2021-47485 report
- https://git.kernel.org/linus/d39bf40e55e666b5905fdbd46a0dced030ce87be report
- https://git.kernel.org/stable/c/bda41654b6e0c125a624ca35d6d20beb8015b5d0 report
- https://git.kernel.org/stable/c/3f57c3f67fd93b4da86aeffea1ca32c484d054ad report
- https://git.kernel.org/stable/c/60833707b968d5ae02a75edb7886dcd4a957cf0d report
- https://git.kernel.org/stable/c/73d2892148aa4397a885b4f4afcfc5b27a325c42 report
- https://git.kernel.org/stable/c/0f8cdfff06829a0b0348b6debc29ff6a61967724 report
- https://git.kernel.org/stable/c/c3e17e58f571f34c51aeb17274ed02c2ed5cf780 report
- https://git.kernel.org/stable/c/0d4395477741608d123dad51def9fe50b7ebe952 report
- https://git.kernel.org/stable/c/d39bf40e55e666b5905fdbd46a0dced030ce87be report
- https://ubuntu.com/security/notices/USN-7987-1 advisory
- https://ubuntu.com/security/notices/USN-7987-2 advisory