2 lines
5.4 KiB
JSON
2 lines
5.4 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0c0356ef2498c1a250fe3846f30293f828737309","status":"affected","version":"35cdc81bfa94d10373ecae279f3c48ca858ac4fd","versionType":"git"},{"lessThan":"1874b0ef1426b873de94c61861e38f29a8df714c","status":"affected","version":"35cdc81bfa94d10373ecae279f3c48ca858ac4fd","versionType":"git"},{"lessThan":"3fdc5182700910a685d23df57d65166e8556a266","status":"affected","version":"35cdc81bfa94d10373ecae279f3c48ca858ac4fd","versionType":"git"},{"lessThan":"9069b1b542de8f3bbffef868aff41521b21485cf","status":"affected","version":"35cdc81bfa94d10373ecae279f3c48ca858ac4fd","versionType":"git"},{"lessThan":"50e2fc36e72d4ad672032ebf646cecb48656efe0","status":"affected","version":"35cdc81bfa94d10373ecae279f3c48ca858ac4fd","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.4"},{"lessThan":"5.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.118","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.36","versionType":"semver"},{"lessThanOrEqual":"5.11.*","status":"unaffected","version":"5.11.20","versionType":"semver"},{"lessThanOrEqual":"5.12.*","status":"unaffected","version":"5.12.3","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"5.13","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"C5CD9030-BC07-4E5E-97CA-F7AC8E17FB90","versionEndExcluding":"5.4.118","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"003E22D0-CA29-4338-8B35-0754C740074F","versionEndExcluding":"5.10.36","versionStartIncluding":"5.5","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"EEC03413-9760-46D4-AC1D-EB084A1D4111","versionEndExcluding":"5.11.20","versionStartIncluding":"5.11","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"F9D6B2DE-7E4A-4B3B-9AEE-3A2C5F23DA32","versionEndExcluding":"5.12.3","versionStartIncluding":"5.12","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Fix UBSAN shift-out-of-bounds warning\n\nIf get_num_sdma_queues or get_num_xgmi_sdma_queues is 0, we end up\ndoing a shift operation where the number of bits shifted equals\nnumber of bits in the operand. This behaviour is undefined.\n\nSet num_sdma_queues or num_xgmi_sdma_queues to ULLONG_MAX, if the\ncount is >= number of bits in the operand.\n\nBug: https://gitlab.freedesktop.org/drm/amd/-/issues/1472"}],"id":"CVE-2021-4460","lastModified":"2026-08-11T03:17:33.890","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.2,"source":"nvd@nist.gov","type":"Primary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.2,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2021-4460","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-01-14T17:39:30.831800Z","version":"2.0.3"}}]},"published":"2025-10-01T12:15:31.850","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"url":"https://git.kernel.org/stable/c/0c0356ef2498c1a250fe3846f30293f828737309"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"url":"https://git.kernel.org/stable/c/1874b0ef1426b873de94c61861e38f29a8df714c"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"url":"https://git.kernel.org/stable/c/3fdc5182700910a685d23df57d65166e8556a266"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"url":"https://git.kernel.org/stable/c/50e2fc36e72d4ad672032ebf646cecb48656efe0"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"url":"https://git.kernel.org/stable/c/9069b1b542de8f3bbffef868aff41521b21485cf"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"nvd@nist.gov","type":"Primary"},{"description":[{"lang":"en","value":"CWE-125"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|