In the Linux kernel, the following vulnerability has been resolved:
mtd: require write permissions for locking and badblock ioctls
MEMLOCK, MEMUNLOCK and OTPLOCK modify protection bits. Thus require write permission. Depending on the hardware MEMLOCK might even be write-once, e.g. for SPI-NOR flashes with their WP# tied to GND. OTPLOCK is always write-once.
MEMSETBADBLOCK modifies the bad block table.
[
{
"events": [
{
"introduced": "4.4.233"
},
{
"fixed": "4.4.269"
}
]
},
{
"events": [
{
"introduced": "4.9.233"
},
{
"fixed": "4.9.269"
}
]
},
{
"events": [
{
"introduced": "4.14.194"
},
{
"fixed": "4.14.233"
}
]
},
{
"events": [
{
"introduced": "4.19.139"
},
{
"fixed": "4.19.191"
}
]
},
{
"events": [
{
"introduced": "5.4.58"
},
{
"fixed": "5.4.119"
}
]
},
{
"events": [
{
"introduced": "5.9"
},
{
"fixed": "5.10.37"
}
]
},
{
"events": [
{
"introduced": "5.11"
},
{
"fixed": "5.11.21"
}
]
},
{
"events": [
{
"introduced": "5.12"
},
{
"fixed": "5.12.4"
}
]
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47055.json"