Riskcovery

CVE-2021-47039

ataflop: potential out of bounds in do_format()

State
Published
Severity
Not scored
Published
Feb 28, 2024
Updated
May 11, 2026
Reserved
Feb 27, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ataflop: potential out of bounds in do_format()

The function uses "type" as an array index:

q = unit[drive].disk[type]->queue;

Unfortunately the bounds check on "type" isn't done until later in the function. Fix this by moving the bounds check to the start.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • bf9c0538e485b591a2ee02d9adb8a99db4be5a2a to before 07f86aa8f4fe077be1b018cc177eb8c6573e5671Affected
  • bf9c0538e485b591a2ee02d9adb8a99db4be5a2a to before 2a3a8bbca28b899806844c00d49ed1b7ccb50957Affected
  • bf9c0538e485b591a2ee02d9adb8a99db4be5a2a to before 1ffec389a6431782a8a28805830b6fae9bf00af1Affected
LinuxLinux
  • 5.11Affected
  • before 5.11Not affected
  • 5.11.21 through 5.11.*Not affected
  • 5.12.4 through 5.12.*Not affected
  • 5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.