SecuritySpace - CVE-2021-21781

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2021-21781

Description: An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process’s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11

Test IDs: 1.3.6.1.4.1.25623.1.0.892713

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2021-21781
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1243
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1243
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpujul2022.html

CVE ID:	CVE-2021-21781
Description:	An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process’s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11
Test IDs:	1.3.6.1.4.1.25623.1.0.892713
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2021-21781 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1243 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1243 https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpujul2022.html