CVE-2021-0144

Related Vulnerabilities: CVE-2021-0144  

Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of privilege via local access.

Description

The MITRE CVE dictionary describes this issue as:

Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of privilege via local access.

Statement

This issue is not in Red Hat supported software. Please contact your system manufacturer for more information and/or potential BIOS firmware update that addresses this issue.

This issue is not in Red Hat supported software. Please contact your system manufacturer for more information and/or potential BIOS firmware update that addresses this issue.

Additional Information

  • Bugzilla 1988309: CVE-2021-0144 kernel: hw: Insecure default variable initialization for the Intel BSSA DFT feature
  • CWE-1188: Insecure Default Initialization of Resource
  • FAQ: Frequently asked questions about CVE-2021-0144