Skip to content
OpenAdvisories
Unscored CVE-2021-31916 EUVD-2021-18791GHSA-2x6w-89x6-c628

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux …

Published May 6, 2021 · Updated Aug 3, 2024 · Assigned by redhat

Description

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

Affected products

VendorProductAffectedFixed
— kernel Kernel 5.12 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 5.10.28-1 —
Debian 13 linux 5.10.28-1 —
Debian 12 linux 5.10.28-1 —
Debian 9 linux 4.9.272-1 DLA-2689-1
Debian 9 linux-4.19 4.19.194-1~deb9u1 DLA-2690-1
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-realtime +1 No fix yet —
Ubuntu 20.04 LTS linux 5.4.0-74.83 USN-4982-1
Ubuntu 20.04 LTS linux-aws 5.4.0-1049.51 USN-4982-1
Ubuntu 20.04 LTS linux-azure 5.4.0-1048.50 USN-4982-1
Ubuntu 20.04 LTS linux-bluefield 5.4.0-1012.15 —
Ubuntu 20.04 LTS linux-gcp 5.4.0-1044.47 USN-4982-1
Ubuntu 20.04 LTS linux-gke 5.4.0-1044.46 USN-4982-1
Ubuntu 20.04 LTS linux-gkeop 5.4.0-1016.17 USN-4982-1
Ubuntu 20.04 LTS linux-hwe-5.8 5.8.0-55.62~20.04.1 USN-4984-1
Ubuntu 20.04 LTS linux-kvm 5.4.0-1040.41 USN-4982-1
Ubuntu 20.04 LTS linux-oem-5.10 5.10.0-1025.26 USN-4948-1
Ubuntu 20.04 LTS linux-oracle 5.4.0-1046.50 USN-4982-1
Ubuntu 20.04 LTS linux-raspi 5.4.0-1036.39 USN-4982-1
Ubuntu 20.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux-riscv-5.8 5.8.0-26.28~20.04.1 —
Ubuntu 18.04 LTS linux 4.15.0-144.148 USN-4979-1
Ubuntu 18.04 LTS linux-aws 4.15.0-1103.110 USN-4979-1
Ubuntu 18.04 LTS linux-aws-5.4 5.4.0-1049.51~18.04.1 USN-4982-1
Ubuntu 18.04 LTS linux-azure-4.15 4.15.0-1115.128 USN-4979-1
Ubuntu 18.04 LTS linux-azure-5.4 5.4.0-1048.50~18.04.1 USN-4982-1
Ubuntu 18.04 LTS linux-dell300x 4.15.0-1022.26 —
Ubuntu 18.04 LTS linux-gcp +13 No fix yet —
Ubuntu 18.04 LTS linux-gcp-4.15 4.15.0-1100.113 USN-4979-1
Ubuntu 18.04 LTS linux-gcp-5.4 5.4.0-1044.47~18.04.2 USN-4982-1
Ubuntu 18.04 LTS linux-gke-5.4 5.4.0-1044.46~18.04.1 USN-4982-1
Ubuntu 18.04 LTS linux-gkeop-5.4 5.4.0-1016.17~18.04.1 USN-4982-1
Ubuntu 18.04 LTS linux-hwe-5.4 5.4.0-74.83~18.04.1 USN-4982-1
Ubuntu 18.04 LTS linux-kvm 4.15.0-1092.94 USN-4979-1
Ubuntu 18.04 LTS linux-oracle 4.15.0-1072.80 USN-4979-1
Ubuntu 18.04 LTS linux-oracle-5.4 5.4.0-1046.50~18.04.2 USN-4982-1
Ubuntu 18.04 LTS linux-raspi-5.4 5.4.0-1036.39~18.04.1 USN-4982-1
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1086.91 USN-4979-1
Ubuntu 18.04 LTS linux-snapdragon 4.15.0-1103.112 USN-4979-1
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Show 9 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro FIPS 20.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 18.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 20.04 LTS linux-aws-fips 5.4.0-1069.73+fips2 —
Ubuntu Pro FIPS-updates 20.04 LTS linux-azure-fips 5.4.0-1073.76+fips1 —
Ubuntu Pro FIPS-updates 20.04 LTS linux-gcp-fips 5.4.0-1067.71~20.04.1 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-aws-fips 4.15.0-2045.47 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-azure-fips 4.15.0-2027.30 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-fips 4.15.0-1060.68 —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1073.79 —
Ubuntu Pro 20.04 LTS linux-azure-fde-5.15 5.15.0-1114.123~20.04.1 —
Ubuntu Pro 16.04 LTS linux 4.4.0-223.256 USN-5361-1
Ubuntu Pro 16.04 LTS linux-aws 4.4.0-1139.153 USN-5361-1
Ubuntu Pro 16.04 LTS linux-aws-hwe 4.15.0-1103.110~16.04.1 USN-4979-1
Ubuntu Pro 16.04 LTS linux-azure 4.15.0-1115.128~16.04.1 USN-4979-1
Ubuntu Pro 16.04 LTS linux-gcp 4.15.0-1100.113~16.04.1 USN-4979-1
Ubuntu Pro 16.04 LTS linux-hwe 4.15.0-144.148~16.04.1 USN-4979-1
Ubuntu Pro 16.04 LTS linux-kvm 4.4.0-1104.113 USN-5361-1
Ubuntu Pro 16.04 LTS linux-oracle 4.15.0-1072.80~16.04.1 USN-4979-1
Ubuntu Pro 14.04 LTS linux No fix yet —
Ubuntu Pro 14.04 LTS linux-aws 4.4.0-1103.108 USN-5361-1
Ubuntu Pro 14.04 LTS linux-azure 4.15.0-1115.128~14.04.1 USN-4979-1
Ubuntu Pro 14.04 LTS linux-lts-xenial 4.4.0-223.256~14.04.1 USN-5361-1
ReleasePackageFixed inAdvisory
RHEL 8 kernel-rt +12 4.18.0-348.rt7.130.el8 RHSA-2021:4140
RHEL 8 perf +26 4.18.0-348.el8 RHSA-2021:4356

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 kernel-tools-libs-devel 4.18.0-348.el8 ALSA-2021:4356
ReleasePackageFixed inAdvisory
SLES 15 SP3 kernel-64kb +5 5.3.18-59.37.2 SUSE-SU-2021:3941-1
SLES 15 SP3 kernel-azure +2 5.3.18-38.31.1 SUSE-SU-2021:3806-1
SLES 15 SP3 kernel-default-base 5.3.18-59.37.2.18.23.3 SUSE-SU-2021:3941-1
SLES 15 SP3 kernel-obs-build 5.3.18-59.37.3 SUSE-SU-2021:3941-1
SLES 15 SP3 kernel-syms 5.3.18-59.37.1 SUSE-SU-2021:3941-1
SLES 15 SP2 kernel-azure +2 5.3.18-18.75.1 SUSE-SU-2021:3807-1
SLES 15 SP2 kernel-default-base 5.3.18-24.96.1.9.44.1 SUSE-SU-2021:3933-1
SLES 15 SP2 kernel-docs +5 5.3.18-24.96.1 SUSE-SU-2021:3933-1
SLES 15 SP1 kernel-docs +4 4.12.14-197.102.2 SUSE-SU-2021:3876-1
SLES 15 SP1 kernel-obs-build 4.12.14-197.102.1 SUSE-SU-2021:3876-1
SLES 15 kernel-docs +1 4.12.14-150.78.2 SUSE-SU-2021:3969-1
SLES 15 kernel-syms +4 4.12.14-150.78.1 SUSE-SU-2021:3969-1
SLES 12 SP5 kernel-azure +2 4.12.14-16.80.1 SUSE-SU-2021:3848-1
SLES 12 SP5 kernel-docs +4 4.12.14-122.103.1 SUSE-SU-2021:3877-1
Show 27 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP4 kernel-syms +2 4.12.14-95.83.2 SUSE-SU-2021:3972-1
SLES 12 SP3 kernel-syms +2 4.4.180-94.150.1 SUSE-SU-2021:3935-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_41 1-4.3.1 SUSE-SU-2021:3935-1
SLES 12 SP2 kernel-syms +2 4.4.121-92.161.1 SUSE-SU-2021:3929-1
SLES for SAP 15 SP1 kernel-docs +3 4.12.14-197.102.2 SUSE-SU-2021:3876-1
SLES for SAP 15 SP1 kernel-obs-build 4.12.14-197.102.1 SUSE-SU-2021:3876-1
SLES for SAP 15 kernel-docs +1 4.12.14-150.78.2 SUSE-SU-2021:3969-1
SLES for SAP 15 kernel-syms +3 4.12.14-150.78.1 SUSE-SU-2021:3969-1
SLES for SAP 12 SP5 kernel-azure +2 4.12.14-16.80.1 SUSE-SU-2021:3848-1
SLES for SAP 12 SP5 kernel-syms +2 4.12.14-122.103.1 SUSE-SU-2021:3877-1
SLES for SAP 12 SP4 kernel-syms +2 4.12.14-95.83.2 SUSE-SU-2021:3972-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.180-94.150.1 SUSE-SU-2021:3935-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_41 1-4.3.1 SUSE-SU-2021:3935-1
SLE Real Time 12 SP5 kernel-rt +3 4.12.14-10.70.2 SUSE-SU-2021:3992-1
SLE Micro 5.1 kernel-default 5.3.18-59.37.2 SUSE-SU-2021:3941-1
SLE Micro 5.1 kernel-default-base 5.3.18-59.37.2.18.23.3 SUSE-SU-2021:3941-1
SLE Micro 5.1 kernel-rt 5.3.18-65.2 SUSE-SU-2021:3979-1
SLE Micro 5.0 kernel-default 5.3.18-24.96.1 SUSE-SU-2021:3933-1
SLE Micro 5.0 kernel-default-base 5.3.18-24.96.1.9.44.1 SUSE-SU-2021:3933-1
SLE Micro 5.0 kernel-rt 5.3.18-62.2 SUSE-SU-2021:3978-1
SLE Live Patching 15 SP3 kernel-default 5.3.18-59.37.2 SUSE-SU-2021:3941-1
SLE Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_10 1-7.3.2 SUSE-SU-2021:3941-1
SLE Live Patching 15 SP2 kernel-default 5.3.18-24.96.1 SUSE-SU-2021:3933-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_22 1-5.3.1 SUSE-SU-2021:3933-1
SLE Live Patching 15 SP1 kernel-default 4.12.14-197.102.2 SUSE-SU-2021:3876-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_27 1-3.3.1 SUSE-SU-2021:3876-1
SLE Live Patching 15 kernel-default 4.12.14-150.78.1 SUSE-SU-2021:3969-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_26 1-1.3.1 SUSE-SU-2021:3969-1
SLE Live Patching 12 SP5 kernel-default 4.12.14-122.103.1 SUSE-SU-2021:3877-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_26 1-8.5.1 SUSE-SU-2021:3877-1
SLE Live Patching 12 SP4 kernel-default 4.12.14-95.83.2 SUSE-SU-2021:3972-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_23 1-6.3.1 SUSE-SU-2021:3972-1
SLE HPC 15 SP1 kernel-docs +3 4.12.14-197.102.2 SUSE-SU-2021:3876-1
SLE HPC 15 SP1 kernel-obs-build 4.12.14-197.102.1 SUSE-SU-2021:3876-1
SLE HPC 15 kernel-docs +1 4.12.14-150.78.2 SUSE-SU-2021:3969-1
SLE HPC 15 kernel-syms +3 4.12.14-150.78.1 SUSE-SU-2021:3969-1
SUSE Real Time Module 15 SP3 kernel-rt +2 5.3.18-65.2 SUSE-SU-2021:3979-1
SUSE Real Time Module 15 SP3 kernel-syms-rt 5.3.18-65.1 SUSE-SU-2021:3979-1
SUSE Real Time Module 15 SP2 kernel-rt 5.3.18-62.2 SUSE-SU-2021:3978-1
SUSE Real Time Module 15 SP2 kernel-rt_debug +1 5.3.18-62.3 SUSE-SU-2021:3978-1
SUSE Real Time Module 15 SP2 kernel-syms-rt 5.3.18-62.1 SUSE-SU-2021:3978-1
SUSE OpenStack Cloud Crowbar 9 kernel-syms +2 4.12.14-95.83.2 SUSE-SU-2021:3972-1
SUSE OpenStack Cloud Crowbar 8 kernel-syms +2 4.4.180-94.150.1 SUSE-SU-2021:3935-1
SUSE OpenStack Cloud Crowbar 8 kgraft-patch-SLE12-SP3_Update_41 1-4.3.1 SUSE-SU-2021:3935-1
SUSE OpenStack Cloud 9 kernel-syms +2 4.12.14-95.83.2 SUSE-SU-2021:3972-1
SUSE OpenStack Cloud 8 kernel-syms +2 4.4.180-94.150.1 SUSE-SU-2021:3935-1
SUSE OpenStack Cloud 8 kgraft-patch-SLE12-SP3_Update_41 1-4.3.1 SUSE-SU-2021:3935-1
SUSE HPE Helion OpenStack 8 kernel-syms +2 4.4.180-94.150.1 SUSE-SU-2021:3935-1
SUSE HPE Helion OpenStack 8 kgraft-patch-SLE12-SP3_Update_41 1-4.3.1 SUSE-SU-2021:3935-1
SUSE Enterprise Storage 6 kernel-docs +3 4.12.14-197.102.2 SUSE-SU-2021:3876-1
SUSE Enterprise Storage 6 kernel-obs-build 4.12.14-197.102.1 SUSE-SU-2021:3876-1
ReleasePackageFixed inAdvisory
openSUSE Leap 15.3 dtb-aarch64 +2 5.3.18-59.37.1 openSUSE-SU-2021:3941-1
openSUSE Leap 15.3 kernel-64kb +3 5.3.18-59.37.2 openSUSE-SU-2021:3941-1
openSUSE Leap 15.3 kernel-azure +2 5.3.18-38.31.1 openSUSE-SU-2021:3806-1
openSUSE Leap 15.3 kernel-debug +4 4.12.14-197.102.2 openSUSE-SU-2021:3941-1, openSUSE-SU-2021:3876-1
openSUSE Leap 15.3 kernel-default-base 5.3.18-59.37.2.18.23.3 openSUSE-SU-2021:3941-1
openSUSE Leap 15.3 kernel-obs-build 5.3.18-59.37.3 openSUSE-SU-2021:3941-1
openSUSE Leap 15.2 kernel-default-base 5.3.18-lp152.106.1.lp152.8.52.1 openSUSE-SU-2021:1501-1
openSUSE Leap 15.2 kernel-docs +8 5.3.18-lp152.106.1 openSUSE-SU-2021:1501-1

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) kernel 5.10.78.1-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 perf +19 4.18.0-348.el8 ELSA-2021-4356
Oracle Linux 7 kernel-uek +5 4.1.12-124.52.4.el7uek ELSA-2021-9346, ELSA-2021-9306, ELSA-2021-9305
Oracle Linux 7 kernel-uek-container 4.14.35-2047.504.2.el7 ELSA-2021-9308, ELSA-2021-9307
Oracle Linux 7 kernel-uek-container-debug 5.4.17-2102.202.5.el8 ELSA-2021-9307
Oracle Linux 7 perf +5 4.14.35-2047.504.2.el7uek ELSA-2021-9306, ELSA-2021-9305

Advisories 35

References