kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIGMODULESIG, verification that a kernel module is signed, for loading via initmodule, does not occur for a module.sigenforce=1 command-line argument.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-35039.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@0c18f29aae7ce3dadd26d8ee3505d07cc982df75",
"digest": {
"line_hashes": [
"212057761743283700153750139244970035507",
"160838345319645068407293089208249337001",
"282409944351900777401291382888496367445",
"98460008292524801634767430703147706834",
"244638320970025852599689338562881305256",
"153711005845535775986348621552541130388",
"224130641941471206229166994173772940334",
"33690677400014882537477611924287256587",
"109531610003115330806894344258461792293",
"66522807302602158749536401709031095698",
"268756559533430330466035751100297296239",
"307891438519847708312164617581335393009"
],
"threshold": 0.9
},
"id": "CVE-2021-35039-7994c567",
"deprecated": false,
"target": {
"file": "kernel/module.c"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-35039.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/0c18f29aae7ce3dadd26d8ee3505d07cc982df75",
"digest": {
"line_hashes": [
"212057761743283700153750139244970035507",
"160838345319645068407293089208249337001",
"282409944351900777401291382888496367445",
"98460008292524801634767430703147706834",
"244638320970025852599689338562881305256",
"153711005845535775986348621552541130388",
"224130641941471206229166994173772940334",
"33690677400014882537477611924287256587",
"109531610003115330806894344258461792293",
"66522807302602158749536401709031095698",
"268756559533430330466035751100297296239",
"307891438519847708312164617581335393009"
],
"threshold": 0.9
},
"id": "CVE-2021-35039-2dab5fab",
"deprecated": false,
"target": {
"file": "kernel/module.c"
}
}
]