{"status":"success","advisory":{"_id":"683547355b16347a91c3a06b","kb_acknowledgements":null,"kb_affected_list":["NetApp Cloud Backup (formerly AltaVault)","NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S","NetApp SolidFire Baseboard Management Controller (BMC)"],"kb_bad_data":false,"kb_cve":["CVE-2021-37576"],"kb_exploitation":"Public","kb_fixes":[{"product":"NetApp Cloud Backup (formerly AltaVault)","fixes":[],"instructions":null,"wontfix":true,"eos_link":"https://mysupport.netapp.com/info/communications/ECMLP2880179.html"},{"product":"NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S","fixes":[],"instructions":null,"wontfix":true,"eos_link":"https://mysupport.netapp.com/info/communications/ECMLP2876227.html"},{"product":"NetApp SolidFire Baseboard Management Controller (BMC)","fixes":[],"instructions":null,"wontfix":true,"eos_link":"https://mysupport.netapp.com/info/communications/ECMLP2847476.html "}],"kb_impact":"Successful exploitation of this vulnerability could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS).","kb_internal_notes":[{"burt":"1425286","jira":"","product":"AFF Baseboard Management Controller (BMC) - A700s"},{"burt":"1425338","jira":"","product":"Active IQ Unified Manager for VMware vSphere"},{"burt":"1425295","jira":"","product":"Brocade Fabric Operating System Firmware"},{"burt":"","jira":"ICI-9347","product":"Cloud Insights Storage Workload Security Agent"},{"burt":"1425297","jira":"","product":"Cloud Volumes ONTAP Mediator"},{"burt":"1425303","jira":"","product":"E-Series SANtricity OS Controller Software 11.x"},{"burt":"1425306","jira":"","product":"FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400/C400"},{"burt":"1425309","jira":"","product":"FAS/AFF Baseboard Management Controller (BMC) - A250/500f/C250"},{"burt":"1425292","jira":"","product":"FAS/AFF Baseboard Management Controller (BMC) - C190/A150/A220/FAS2720/FAS2750"},{"burt":"1425342","jira":"","product":"FAS/AFF Service Processor - 8080/8060/8040/8020"},{"burt":"1425332","jira":"","product":"NetApp Cloud Backup (formerly AltaVault)"},{"burt":"1425315","jira":"","product":"NetApp Converged Systems Advisor Agent"},{"burt":"1425348","jira":"","product":"NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S"},{"burt":"1425320","jira":"","product":"NetApp HCI Baseboard Management Controller (BMC) - H410C"},{"burt":"1425322","jira":"","product":"NetApp HCI Baseboard Management Controller (BMC) - H610C"},{"burt":"1425324","jira":"","product":"NetApp HCI Baseboard Management Controller (BMC) - H610S"},{"burt":"1425326","jira":"","product":"NetApp HCI Baseboard Management Controller (BMC) - H615C"},{"burt":"1425344","jira":"","product":"NetApp HCI Compute Node (Bootstrap OS)"},{"burt":"1425330","jira":"","product":"NetApp SolidFire & HCI Management Node"},{"burt":"1425346","jira":"","product":"NetApp SolidFire & HCI Storage Node (Element Software)"},{"burt":"1425328","jira":"","product":"NetApp SolidFire Baseboard Management Controller (BMC)"},{"burt":"1425334","jira":"","product":"NetApp VASA Provider for Clustered Data ONTAP 9.7 and above"},{"burt":"1425318","jira":"","product":"SnapCenter Plug-in for VMware vSphere/BlueXP backup and Recovery for Virtual Machine"},{"burt":"1425312","jira":"","product":"Storage Replication Adapter for Clustered Data ONTAP for VMware vSphere 9.7 and above"},{"burt":"1425353","jira":"","product":"StorageGRID (formerly StorageGRID Webscale)"},{"burt":"1425352","jira":"","product":"StorageGRID Baseboard Management Controller (BMC)"},{"burt":"1425351","jira":"","product":"StorageGRID9 (9.x and prior)"},{"burt":"1425356","jira":"","product":"Virtual Storage Console for VMware vSphere 9.7 and above"}],"kb_investigating_list":[],"kb_num":"9010000","kb_ref":["https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f62f3c20647ebd5fb6ecb8f0b477b9281c44c10a","https://lore.kernel.org/linuxppc-dev/87im0x1lqi.fsf@mpe.ellerman.id.au/T/#u"],"kb_rev_history":[{"comment":"Initial Public Release","date":"20210917","version":"1.0"},{"comment":"SnapCenter Plug-in for VMware vSphere moved to Products Not Affected","date":"20210920","version":"2.0"},{"comment":"Brocade Fabric Operating System Firmware moved to Products Not Affected","date":"20210923","version":"3.0"},{"comment":"NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H300E/H500E/H700E/H410S moved to Won't Fix status","date":"20211007","version":"4.0"},{"comment":"NetApp SolidFire Baseboard Management Controller (BMC) moved to Won't Fix status","date":"20211101","version":"5.0"},{"comment":"NetApp HCI Baseboard Management Controller (BMC) - H610C, NetApp HCI Baseboard Management Controller (BMC) - H610S, and NetApp HCI Baseboard Management Controller (BMC) - H615C moved to Products Not Affected","date":"20211108","version":"6.0"},{"comment":"NetApp Cloud Backup (formerly AltaVault) moved to Won't Fix status","date":"20220106","version":"7.0"},{"comment":"Final status","date":"20240509","version":"8.0"}],"kb_revised_list":[],"kb_scoring":{"CVE-2021-37576":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"kb_scoring_calc":[{"cve_id":"CVE-2021-37576","range":"HIGH","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"kb_status":"Final","kb_summary":"Multiple NetApp products incorporate Linux Kernel. Linux Kernel versions through 5.13.5 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS).","kb_title":"CVE-2021-37576 Linux Kernel Vulnerability in NetApp Products","kb_unaffected_list":["AFF Baseboard Management Controller (BMC) - A700s","ATTO FibreBridge - 7500N","ATTO FibreBridge - 7600N","Active IQ Unified Manager for Linux","Active IQ Unified Manager for Microsoft Windows","Active IQ Unified Manager for VMware vSphere","Active IQ mobile app","Astra Control Center","Astra Control Center - Cloud Insights Telegraf Agent","Astra Control Center - NetApp Kubernetes Monitoring Operator","Astra Trident","BlueXP Classification","Brocade Fabric Operating System Firmware","Brocade SAN Navigator (SANnav)","Cloud Insights Acquisition Unit","Cloud Insights Storage Workload Security Agent","Cloud Insights Telegraf Agent","Cloud Volumes ONTAP Mediator","E-Series BIOS","E-Series SANtricity OS Controller Software 11.x","E-Series SANtricity Unified Manager and Web Services Proxy","Element .NET SDK","Element HealthTools","Element JAVA SDK","Element Plug-in for vCenter Server","Element Python SDK","FAS/AFF BIOS - 8300/8700/A400/C400","FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400/C400","FAS/AFF Baseboard Management Controller (BMC) - A250/500f/C250","FAS/AFF Baseboard Management Controller (BMC) - C190/A150/A220/FAS2720/FAS2750","FAS/AFF Service Processor - 8080/8060/8040/8020","Global File Cache","Host Utilities - SAN for Linux","Host Utilities - SAN for Windows","IOM6 SAS Disk Shelf Firmware","Management Services for Element Software and NetApp HCI","MetroCluster Tiebreaker for clustered Data ONTAP","NetApp BlueXP","NetApp Converged Systems Advisor Agent","NetApp HCI Baseboard Management Controller (BMC) - H410C","NetApp HCI Baseboard Management Controller (BMC) - H610C","NetApp HCI Baseboard Management Controller (BMC) - H610S","NetApp HCI Baseboard Management Controller (BMC) - H615C","NetApp HCI Compute Node (Bootstrap OS)","NetApp HCI Compute Node BIOS","NetApp HCI Storage Node BIOS","NetApp Kubernetes Monitoring Operator","NetApp Manageability SDK","NetApp NFS Plug-in for VMware VAAI","NetApp ONTAP PowerShell Toolkit (PSTK)","NetApp SolidFire & HCI Management Node","NetApp SolidFire & HCI Storage Node (Element Software)","NetApp SolidFire Plug-in for vRealize Orchestrator (SolidFire vRO)","NetApp VASA Provider for Clustered Data ONTAP 9.7 and above","NetApp XCP NFS","NetApp XCP SMB","ONTAP 9 (formerly Clustered Data ONTAP)","ONTAP Antivirus Connector","ONTAP Mediator","ONTAP Select Deploy administration utility","OnCommand Insight","OnCommand Workflow Automation","SANtricity Storage Plugin for vCenter","SRA Plugin for Linux","SRA Plugin for Windows","Single Mailbox Recovery","Snap Creator Framework","SnapCenter","SnapCenter Plug-in for VMware vSphere/BlueXP backup and Recovery for Virtual Machine","SnapManager for Hyper-V","SolidFire Storage Replication Adapter","Storage Replication Adapter for Clustered Data ONTAP for VMware vSphere 9.7 and above","StorageGRID (formerly StorageGRID Webscale)","StorageGRID BIOS SG1000/SG100","StorageGRID BIOS SG5660/SG5612/SG5760/SG5712","StorageGRID BIOS SG6060/SGF6024/SGF6112","StorageGRID Baseboard Management Controller (BMC)","StorageGRID9 (9.x and prior)","System Manager 9.x","Virtual Storage Console for VMware vSphere 9.7 and above"],"kb_workarounds":"None at this time.","ntap_advisory_id":"NTAP-20210917-0005","adv_id":"ntap-20210917-0005","published_date":"2021-09-17T00:00:00","updated_date":"2024-05-09T00:00:00","inserted_date":"2025-05-27T05:01:41.388000","modified_date":null}}