CVE-2021-47055

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: require write permissions for locking and badblock ioctls MEMLOCK, MEMUNLOCK and OTPLOCK modify protection bits. Thus require write permission. Depending on the hardware MEMLOCK might even be write-once, e.g. for SPI-NOR flashes with their WP# tied to GND. OTPLOCK is always write-once. MEMSETBADBLOCK modifies the bad block table.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://errata.rockylinux.org/RLSA-2024:3627
• https://errata.rockylinux.org/RLSA-2024:3618
• https://www.suse.com/security/cve/CVE-2021-47055.html
• https://security-tracker.debian.org/tracker/CVE-2021-47055
• https://access.redhat.com/errata/RHSA-2024:3618
• https://bugzilla.redhat.com/2250843
• https://bugzilla.redhat.com/2257406
• https://bugzilla.redhat.com/2263875
• https://bugzilla.redhat.com/2265271
• https://bugzilla.redhat.com/2265646
• https://bugzilla.redhat.com/2265654
• https://bugzilla.redhat.com/2265833
• https://bugzilla.redhat.com/2266296
• https://bugzilla.redhat.com/2266446
• https://bugzilla.redhat.com/2266746
• https://bugzilla.redhat.com/2266841
• https://bugzilla.redhat.com/2267038
• https://bugzilla.redhat.com/2267185
• https://bugzilla.redhat.com/2267355
• https://bugzilla.redhat.com/2267509
• https://bugzilla.redhat.com/2267705
• https://bugzilla.redhat.com/2267724
• https://bugzilla.redhat.com/2267758
• https://bugzilla.redhat.com/2267789
• https://bugzilla.redhat.com/2267797

💬 Discuss CVE-2021-47055 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.