CVE-2021-47368

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47368
In the Linux kernel, the following vulnerability has been resolved: enetc: Fix illegal access when reading affinity_hint irq_set_affinity_hit() stores a reference to the cpumask_t parameter in the irq descriptor, and that reference can be accessed later from irq_affinity_hint_proc_show(). Since the cpu_mask parameter passed to irq_set_affinity_hit() has only temporary storage (it's on the stack memory), later accesses to it are illegal. Thus reads from the corresponding procfs affinity_hint file can result in paging request oops. The issue is fixed by the get_cpu_mask() helper, which provides a permanent storage for the cpumask_t parameter.

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/4c4c3052911b577920353a7646e4883d5da40c28 Patch
https://git.kernel.org/stable/c/6c3f1b741c6c2914ea120e3a5790d3e900152f7b Patch
https://git.kernel.org/stable/c/6f329d9da2a5ae032fcde800a99b118124ed5270 Patch
https://git.kernel.org/stable/c/7237a494decfa17d0b9d0076e6cee3235719de90 Patch
https://git.kernel.org/stable/c/4c4c3052911b577920353a7646e4883d5da40c28 Patch
https://git.kernel.org/stable/c/6c3f1b741c6c2914ea120e3a5790d3e900152f7b Patch
https://git.kernel.org/stable/c/6f329d9da2a5ae032fcde800a99b118124ed5270 Patch
https://git.kernel.org/stable/c/7237a494decfa17d0b9d0076e6cee3235719de90 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*
History

02 Apr 2025, 14:53

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/4c4c3052911b577920353a7646e4883d5da40c28 - () https://git.kernel.org/stable/c/4c4c3052911b577920353a7646e4883d5da40c28 - Patch
References () https://git.kernel.org/stable/c/6c3f1b741c6c2914ea120e3a5790d3e900152f7b - () https://git.kernel.org/stable/c/6c3f1b741c6c2914ea120e3a5790d3e900152f7b - Patch
References () https://git.kernel.org/stable/c/6f329d9da2a5ae032fcde800a99b118124ed5270 - () https://git.kernel.org/stable/c/6f329d9da2a5ae032fcde800a99b118124ed5270 - Patch
References () https://git.kernel.org/stable/c/7237a494decfa17d0b9d0076e6cee3235719de90 - () https://git.kernel.org/stable/c/7237a494decfa17d0b9d0076e6cee3235719de90 - Patch

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/4c4c3052911b577920353a7646e4883d5da40c28 - () https://git.kernel.org/stable/c/4c4c3052911b577920353a7646e4883d5da40c28 -
References () https://git.kernel.org/stable/c/6c3f1b741c6c2914ea120e3a5790d3e900152f7b - () https://git.kernel.org/stable/c/6c3f1b741c6c2914ea120e3a5790d3e900152f7b -
References () https://git.kernel.org/stable/c/6f329d9da2a5ae032fcde800a99b118124ed5270 - () https://git.kernel.org/stable/c/6f329d9da2a5ae032fcde800a99b118124ed5270 -
References () https://git.kernel.org/stable/c/7237a494decfa17d0b9d0076e6cee3235719de90 - () https://git.kernel.org/stable/c/7237a494decfa17d0b9d0076e6cee3235719de90 -

03 Jul 2024, 01:37

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.1
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: enetc: corrige el acceso ilegal al leer affinity_hint irq_set_affinity_hit() almacena una referencia al parámetro cpumask_t en el descriptor irq, y se puede acceder a esa referencia más tarde desde irq_affinity_hint_proc_show(). Dado que el parámetro cpu_mask pasado a irq_set_affinity_hit() solo tiene almacenamiento temporal (está en la memoria de la pila), los accesos posteriores a él son ilegales. Por lo tanto, las lecturas del archivo procfs affinity_hint correspondiente pueden dar como resultado una solicitud de paginación. El problema lo soluciona el asistente get_cpu_mask(), que proporciona un almacenamiento permanente para el parámetro cpumask_t.
CWE CWE-400

21 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 15:15

Updated : 2025-04-02 14:53

NVD link : CVE-2021-47368

Mitre link : CVE-2021-47368

CVE.ORG link : CVE-2021-47368

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-400

Uncontrolled Resource Consumption