← Database

CVE-2021-42252

HIGH CVSS: 7.8 Published: 2021-10-11 Modified: 2026-08-05

Description

An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6. Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs because a certain comparison uses values that are not memory sizes.

Affected Platforms

Netapp H300S FirmwareNetapp H700E FirmwareNetapp Solidfire Baseboard Management ControllerLinux Linux KernelNetapp H700SNetapp H410SNetapp H410S FirmwareNetapp H300SNetapp H410C FirmwareNetapp Cloud Backup

Weakness Type

NVD-CWE-noinfo

References