CVE-2021-43389: An issue was discovered in the Linux kernel before 5.14.15

Medium severity · published Nov 4, 2021

CVE-2021-43389

An issue was discovered in the Linux kernel before 5.14.15

5.5

CVSS

0.7%

EPSS

On KEV

Description

An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.7% · higher than 54% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Kernel · Linux

before 5.14.15 · source: NVD

Communications Cloud Native Core Binding Support Function · Oracle

22.1.3 · source: NVD

Communications Cloud Native Core Network Exposure Function · Oracle

22.1.1 · source: NVD

Communications Cloud Native Core Policy · Oracle

22.2.0 · source: NVD

Debian Linux · Debian

9.0; 10.0 · source: NVD

Enterprise Linux · Redhat

8.0 · source: NVD

Affected product

Kernel

Linux

All Kernel CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2021-43389

CVE.org

https://www.cve.org/CVERecord?id=CVE-2021-43389

Mailing List

http://www.openwall.com/lists/oss-security/2021/11/05/1

Issue Tracking

https://bugzilla.redhat.com/show_bug.cgi?id=2013180

Mailing List

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15

Mailing List

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1f3e2e97c003f80c4b087092b225c8787ff91e4d

Mailing List

https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html

Mailing List

https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html