SB20240702135 - Input validation error in Linux kernel platform x86 driver
Published: July 2, 2024 Updated: May 13, 2025
Security Bulletin ID
SB20240702135
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Input validation error (CVE-ID: CVE-2021-47073)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper input validation within the init_dell_smbios_wmi() function in drivers/platform/x86/dell-smbios-wmi.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/75cfc833da4a2111106d4c134e93e0c7f41e35e7
- https://git.kernel.org/stable/c/6fa78a6b9a3beb676a010dc489c1257f7e432525
- https://git.kernel.org/stable/c/0cf036a0d325200e6c27b90908e51195bbc557b1
- https://git.kernel.org/stable/c/8d746ea7c687bab060a2c05a35c449302406cd52
- https://git.kernel.org/stable/c/3a53587423d25c87af4b4126a806a0575104b45e
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.192
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.40
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.7
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.122