QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2021-21781

Back to search

CVE-2021-21781

Published: Aug 18, 2021

Modified: Aug 3, 2024

PUBLISHED

CVSS v3.0

4.0

MEDIUM

Description

An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process’s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11

VendorProductVersions

n/a

Linux Kernel

affected
Linux Kernel v5.4.54, Linux Kernel v5.4.66

Weaknesses (CWE)

CWE-908

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now