CVE-2021-42008
HIGH 7.8EPSS 1.6%
The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access.
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 6.9 MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C - EPSS
- 1.56% chance of exploitation in the next 30 days, 75th percentile
- Published
- 2021-10-04
- Updated
- 2024-08-04
Proof-of-concept exploits (3)
- 0xdevil/CVE-2021-4200830★ · 2022-05-01
- numanturle/CVE-2021-420082★ · 2021-12-03
- WhatsWrongAndWhy/CVE-2021-420080★ · 2026-07-21
Security advisories
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.13
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19d1532a187…
- https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html
- https://security.netapp.com/advisory/ntap-20211104-0002
- https://www.youtube.com/watch?v=d5f9xLK8Vhw