CVE-2021-33656 - kernel: when setting font with malicious data by ioctl PIO_FONT, kernel will write memory out of bounds

Back Back to CVE browser

MEDIUM

kernel: when setting font with malicious data by ioctl PIO_FONT, kernel will write memory out of bounds

Published Jul 18, 2022

6.8

MEDIUM

CVSS 3.1

EPSS 0.61%

Description

When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.

Affected products

Vendor n/a Product openEuler:kernel Default
n/a
- Version
  <5.10.127
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

openEuler:kernel

n/a

Version	Status	Constraints
<5.10.127	affected	-

Red Hat Enterprise Linux 8

kernel-0:4.18.0-477.10.1.el8_8

Fixed · RHSA-2023:2951
Red Hat Enterprise Linux 8

kernel-rt-0:4.18.0-477.10.1.rt7.274.el8_8

Fixed · RHSA-2023:2736
Red Hat Enterprise Linux 8.6 Extended Update Support

kernel-0:4.18.0-372.70.1.el8_6

Fixed · RHSA-2023:4789
Red Hat Virtualization 4 for Red Hat Enterprise Linux 8

kernel-0:4.18.0-372.70.1.el8_6

Fixed · RHSA-2023:4789
Red Hat Enterprise Linux 6

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel-rt

Out of support scope
Red Hat Enterprise Linux 9

kernel

Affected
Red Hat Enterprise Linux 9

kernel-rt

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 8	kernel-0:4.18.0-477.10.1.el8_8	Fixed	RHSA-2023:2951
Red Hat Enterprise Linux 8	kernel-rt-0:4.18.0-477.10.1.rt7.274.el8_8	Fixed	RHSA-2023:2736
Red Hat Enterprise Linux 8.6 Extended Update Support	kernel-0:4.18.0-372.70.1.el8_6	Fixed	RHSA-2023:4789
Red Hat Virtualization 4 for Red Hat Enterprise Linux 8	kernel-0:4.18.0-372.70.1.el8_6	Fixed	RHSA-2023:4789
Red Hat Enterprise Linux 6	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 9	kernel	Affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a

Remediation

Red Hat statement

This flaw is rated as a having Moderate impact, because only local user with the access to the VGA device can trigger it.

Red Hat mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (9)

http://www.openwall.com/lists/oss-security/2022/07/19/3
mailing-listx_refsource_MLISTMailing ListPatchThird Party Advisory
https://access.redhat.com/security/cve/CVE-2021-33656
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2108696
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-20333
Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/releases/5.10.127/vt-drop-old-font-ioctls.patch
x_refsource_MISCPatchThird Party Advisory
https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-33656
https://www.cve.org/CVERecord?id=CVE-2021-33656
https://www.openeuler.org/en/security/cve/detail.html?id=CVE-2021-33656&packageName=kernel
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2022/07/19/3		mailing-listx_refsource_MLISTMailing ListPatchThird Party Advisory
https://access.redhat.com/security/cve/CVE-2021-33656		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2108696		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-20333		Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/releases/5.10.127/vt-drop-old-font-ioctls.patch		x_refsource_MISCPatchThird Party Advisory
https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-33656
https://www.cve.org/CVERecord?id=CVE-2021-33656
https://www.openeuler.org/en/security/cve/detail.html?id=CVE-2021-33656&packageName=kernel		x_refsource_MISCThird Party Advisory