{"id":"CVE-2021-42008","details":"The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access.","modified":"2026-03-13T05:13:54.668180Z","published":"2021-10-05T00:15:07.413Z","related":["SUSE-SU-2021:14849-1","SUSE-SU-2021:3640-1","SUSE-SU-2021:3641-1","SUSE-SU-2021:3642-1","SUSE-SU-2021:3658-1","SUSE-SU-2021:3675-1","SUSE-SU-2021:3723-1","SUSE-SU-2021:3748-1","SUSE-SU-2021:3754-1","SUSE-SU-2021:3876-1","SUSE-SU-2021:3929-1","SUSE-SU-2021:3935-1","SUSE-SU-2021:3969-1","SUSE-SU-2021:3972-1","openSUSE-SU-2021:1477-1","openSUSE-SU-2021:3641-1","openSUSE-SU-2021:3675-1","openSUSE-SU-2021:3876-1"],"references":[{"type":"ADVISORY","url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.13"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20211104-0002/"},{"type":"FIX","url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19d1532a187669ce86d5a2696eb7275310070793"},{"type":"EVIDENCE","url":"https://www.youtube.com/watch?v=d5f9xLK8Vhw"}],"affected":[{"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"2.6.12"},{"fixed":"4.4.282"}]},{"events":[{"introduced":"4.5"},{"fixed":"4.9.281"}]},{"events":[{"introduced":"4.10"},{"fixed":"4.14.245"}]},{"events":[{"introduced":"4.15"},{"fixed":"4.19.205"}]},{"events":[{"introduced":"4.20"},{"fixed":"5.4.143"}]},{"events":[{"introduced":"5.5"},{"fixed":"5.10.61"}]},{"events":[{"introduced":"5.11"},{"fixed":"5.13.13"}]},{"events":[{"introduced":"0"},{"last_affected":"9.0"}]}],"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-42008.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}