CVE-2021-47006

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47006
In the Linux kernel, the following vulnerability has been resolved: ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook The commit 1879445dfa7b ("perf/core: Set event's default ::overflow_handler()") set a default event->overflow_handler in perf_event_alloc(), and replace the check event->overflow_handler with is_default_overflow_handler(), but one is missing. Currently, the bp->overflow_handler can not be NULL. As a result, enable_single_step() is always not invoked. Comments from Zhen Lei: https://patchwork.kernel.org/project/linux-arm-kernel/patch/20210207105934.2001-1-thunder.leizhen@huawei.com/

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3ed8832aeaa9a37b0fc386bb72ff604352567c80 Patch
https://git.kernel.org/stable/c/555a70f7fff03bd669123487905c47ae27dbdaac Patch
https://git.kernel.org/stable/c/630146203108bf6b8934eec0dfdb3e46dcb917de Patch
https://git.kernel.org/stable/c/7eeacc6728c5478e3c01bc82a1f08958eaa12366 Patch
https://git.kernel.org/stable/c/a506bd5756290821a4314f502b4bafc2afcf5260 Patch
https://git.kernel.org/stable/c/a9938d6d78a238d6ab8de57a4d3dcf77adceb9bb Patch
https://git.kernel.org/stable/c/dabe299425b1a53a69461fed7ac8922ea6733a25 Patch
https://git.kernel.org/stable/c/ed1f67465327cec4457bb988775245b199da86e6 Patch
https://git.kernel.org/stable/c/3ed8832aeaa9a37b0fc386bb72ff604352567c80 Patch
https://git.kernel.org/stable/c/555a70f7fff03bd669123487905c47ae27dbdaac Patch
https://git.kernel.org/stable/c/630146203108bf6b8934eec0dfdb3e46dcb917de Patch
https://git.kernel.org/stable/c/7eeacc6728c5478e3c01bc82a1f08958eaa12366 Patch
https://git.kernel.org/stable/c/a506bd5756290821a4314f502b4bafc2afcf5260 Patch
https://git.kernel.org/stable/c/a9938d6d78a238d6ab8de57a4d3dcf77adceb9bb Patch
https://git.kernel.org/stable/c/dabe299425b1a53a69461fed7ac8922ea6733a25 Patch
https://git.kernel.org/stable/c/ed1f67465327cec4457bb988775245b199da86e6 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

19 Mar 2025, 10:49

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/3ed8832aeaa9a37b0fc386bb72ff604352567c80 - () https://git.kernel.org/stable/c/3ed8832aeaa9a37b0fc386bb72ff604352567c80 - Patch
References () https://git.kernel.org/stable/c/555a70f7fff03bd669123487905c47ae27dbdaac - () https://git.kernel.org/stable/c/555a70f7fff03bd669123487905c47ae27dbdaac - Patch
References () https://git.kernel.org/stable/c/630146203108bf6b8934eec0dfdb3e46dcb917de - () https://git.kernel.org/stable/c/630146203108bf6b8934eec0dfdb3e46dcb917de - Patch
References () https://git.kernel.org/stable/c/7eeacc6728c5478e3c01bc82a1f08958eaa12366 - () https://git.kernel.org/stable/c/7eeacc6728c5478e3c01bc82a1f08958eaa12366 - Patch
References () https://git.kernel.org/stable/c/a506bd5756290821a4314f502b4bafc2afcf5260 - () https://git.kernel.org/stable/c/a506bd5756290821a4314f502b4bafc2afcf5260 - Patch
References () https://git.kernel.org/stable/c/a9938d6d78a238d6ab8de57a4d3dcf77adceb9bb - () https://git.kernel.org/stable/c/a9938d6d78a238d6ab8de57a4d3dcf77adceb9bb - Patch
References () https://git.kernel.org/stable/c/dabe299425b1a53a69461fed7ac8922ea6733a25 - () https://git.kernel.org/stable/c/dabe299425b1a53a69461fed7ac8922ea6733a25 - Patch
References () https://git.kernel.org/stable/c/ed1f67465327cec4457bb988775245b199da86e6 - () https://git.kernel.org/stable/c/ed1f67465327cec4457bb988775245b199da86e6 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CWE NVD-CWE-noinfo

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/3ed8832aeaa9a37b0fc386bb72ff604352567c80 - () https://git.kernel.org/stable/c/3ed8832aeaa9a37b0fc386bb72ff604352567c80 -
References () https://git.kernel.org/stable/c/555a70f7fff03bd669123487905c47ae27dbdaac - () https://git.kernel.org/stable/c/555a70f7fff03bd669123487905c47ae27dbdaac -
References () https://git.kernel.org/stable/c/630146203108bf6b8934eec0dfdb3e46dcb917de - () https://git.kernel.org/stable/c/630146203108bf6b8934eec0dfdb3e46dcb917de -
References () https://git.kernel.org/stable/c/7eeacc6728c5478e3c01bc82a1f08958eaa12366 - () https://git.kernel.org/stable/c/7eeacc6728c5478e3c01bc82a1f08958eaa12366 -
References () https://git.kernel.org/stable/c/a506bd5756290821a4314f502b4bafc2afcf5260 - () https://git.kernel.org/stable/c/a506bd5756290821a4314f502b4bafc2afcf5260 -
References () https://git.kernel.org/stable/c/a9938d6d78a238d6ab8de57a4d3dcf77adceb9bb - () https://git.kernel.org/stable/c/a9938d6d78a238d6ab8de57a4d3dcf77adceb9bb -
References () https://git.kernel.org/stable/c/dabe299425b1a53a69461fed7ac8922ea6733a25 - () https://git.kernel.org/stable/c/dabe299425b1a53a69461fed7ac8922ea6733a25 -
References () https://git.kernel.org/stable/c/ed1f67465327cec4457bb988775245b199da86e6 - () https://git.kernel.org/stable/c/ed1f67465327cec4457bb988775245b199da86e6 -

07 Nov 2024, 16:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ARM: 9064/1: hw_breakpoint: no comprobar directamente el gancho overflow_handler del evento. el commit 1879445dfa7b ("perf/core: establecer el valor predeterminado del evento ::overflow_handler()") establece un valor predeterminado event->overflow_handler en perf_event_alloc(), y reemplace check event->overflow_handler con is_default_overflow_handler(), pero falta uno. Actualmente, bp->overflow_handler no puede ser NULL. Como resultado, enable_single_step() no siempre se invoca. Comentarios de Zhen Lei: https://patchwork.kernel.org/project/linux-arm-kernel/patch/20210207105934.2001-1-thunder.leizhen@huawei.com/

28 Feb 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-28 09:15

Updated : 2025-03-19 10:49

NVD link : CVE-2021-47006

Mitre link : CVE-2021-47006

CVE.ORG link : CVE-2021-47006

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo