Vulnerability identifier: #VU91335

Vulnerability risk: Low

CVSSv3.1: 2.9 [AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47315

CWE-ID: CWE-200

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to information disclosure within the fsl_ifc_ctrl_probe() and free_irq() functions in drivers/memory/fsl_ifc.c. A local user can gain access to sensitive information.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel:

---

External links
http://git.kernel.org/stable/c/b7a2bcb4a3731d68f938207f75ed3e1d41774510
http://git.kernel.org/stable/c/bd051b3e184fa56eeb6276ee913ba4d48069024b
http://git.kernel.org/stable/c/d0d04b95e8ed0223844a1d58497c686fe2e4a955
http://git.kernel.org/stable/c/6b3b002de90738e3c85853a682ce7e0fa078d42b
http://git.kernel.org/stable/c/94bc2fe46102d1e060fc749c0c19511e76c9995f
http://git.kernel.org/stable/c/d9213d4f372d30b5bc4d921795d6bed0c0e3eebf
http://git.kernel.org/stable/c/8d071d270afba468708faca5f7b6d9e656f75e27
http://git.kernel.org/stable/c/83af5816308b490b05fc8fa27fc1bdc769df200a
http://git.kernel.org/stable/c/28f71fd81ebd3b386bf5c7c5539664156f7d72c1
http://git.kernel.org/stable/c/3b132ab67fc7a358fff35e808fa65d4bea452521

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.