---

CVE-2021-35039 - log back

CVE-2021-35039 edited at 07 Jul 2021 07:46:40
Severity	- Unknown + Medium
Remote	- Unknown + Local
Type	- Unknown + Certificate verification bypass
Description	+ kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, does not occur for a module.sig_enforce=1 command-line argument.
References	+ https://www.openwall.com/lists/oss-security/2021/07/06/3 + https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.12.14&id=404dd3af590ac67740eeb9c027879945bd2a3c13 + https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.10.47&id=3051f230f19feb02dfe5b36794f8c883b576e184

CVE-2021-35039 created at 07 Jul 2021 07:44:58
Severity	+ Unknown
Remote	+ Unknown
Type	+ Unknown
Description
References
Notes