CVE-2021-4454: linux kernel 5.14; +1 more affected products

Affected technology

linux kernel · from 5.4.138 (inclusive), before 5.4.232 (exclusive)
linux

linux kernel · from 5.10.56 (inclusive), before 5.10.168 (exclusive)
linux

linux kernel · from 5.13.8 (inclusive), before 5.14 (exclusive)
linux

linux kernel · from 5.14.1 (inclusive), before 5.15.93 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.11 (exclusive)
linux

linux kernel · 5.14
linux

linux kernel · 5.14 · update rc4
linux

linux kernel · 5.14 · update rc5
linux

linux kernel · 5.14 · update rc6
linux

linux kernel · 5.14 · update rc7
linux

linux kernel · 6.2 · update rc1
linux

linux kernel · 6.2 · update rc2
linux

linux kernel · 6.2 · update rc3
linux

linux kernel · 6.2 · update rc4
linux

linux kernel · 6.2 · update rc5
linux

linux kernel · 6.2 · update rc6
linux

Linux · 7eef18c0479ba5d9f54fba30cd77c233ebca3eb1 to before 6950df42a03c9ac9290503ced3f371199cb68fa9, 55dd22c5d029423f513fd849e633adf0e9c10d0c to before b6d44072117bba057d50f7a2f96e5d070c65926d, 0c71437dd50dd687c15d8ca80b3b68f10bb21d63 to before 9ab896775f98ff54b68512f345eed178bf961084, 0c71437dd50dd687c15d8ca80b3b68f10bb21d63 to before 1740a1e45eee65099a92fb502e1e67e63aad277d, 0c71437dd50dd687c15d8ca80b3b68f10bb21d63 to before d0553680f94c49bbe0e39eb50d033ba563b4212d, 5e1fc537c1be332aef9621ca9146aeb3ba59522f, 5.4.138 to before 5.4.232, 5.10.56 to before 5.10.168, 5.13.8 to before 5.14
Linux

Linux · 5.14
Linux

Component: Not specified by the source
File: net/can/j1939/transport.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.