An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. video_usercopy in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, aka CID-fb18802a338b.
References
Link | Resource |
---|---|
https://bugzilla.suse.com/show_bug.cgi?id=1184120 | Issue Tracking Third Party Advisory |
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.3 | Patch Vendor Advisory |
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fb18802a338b36f675a388fc03d2aa504a0d0899 | Patch Vendor Advisory |
https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html | Third Party Advisory |
Configurations
History
16 May 2022, 20:33
Type | Values Removed | Values Added |
---|---|---|
First Time |
Debian debian Linux
Debian |
|
References | (MLIST) https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html - Third Party Advisory | |
CWE | ||
CPE | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
03 May 2022, 16:04
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-401 |
23 Jun 2021, 02:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
06 Apr 2021, 17:45
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 6.2 |
CWE | CWE-772 | |
References | (MISC) https://bugzilla.suse.com/show_bug.cgi?id=1184120 - Issue Tracking, Third Party Advisory | |
References | (MISC) https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.3 - Patch, Vendor Advisory | |
References | (MISC) https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fb18802a338b36f675a388fc03d2aa504a0d0899 - Patch, Vendor Advisory |
02 Apr 2021, 05:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-04-02 05:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-30002
Mitre link : CVE-2021-30002
CVE.ORG link : CVE-2021-30002
JSON object : View
Products Affected
linux
- linux_kernel
debian
- debian_linux
CWE
CWE-401
Missing Release of Memory after Effective Lifetime