CVE-2021-47016

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47016
In the Linux kernel, the following vulnerability has been resolved: m68k: mvme147,mvme16x: Don't wipe PCC timer config bits Don't clear the timer 1 configuration bits when clearing the interrupt flag and counter overflow. As Michael reported, "This results in no timer interrupts being delivered after the first. Initialization then hangs in calibrate_delay as the jiffies counter is not updated." On mvme16x, enable the timer after requesting the irq, consistent with mvme147.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1dfb26df15fc7036a74221d43de7427f74293dae Patch
https://git.kernel.org/stable/c/43262178c043032e7c42d00de44c818ba05f9967 Patch
https://git.kernel.org/stable/c/5d34225169346cab5145978d153b9ce90e9ace21 Patch
https://git.kernel.org/stable/c/73fdeb612d25b5e105c219e05434285a45d23576 Patch
https://git.kernel.org/stable/c/f6a90818a32058fca62cda3a2027a6a2364e1878 Patch
https://git.kernel.org/stable/c/1dfb26df15fc7036a74221d43de7427f74293dae Patch
https://git.kernel.org/stable/c/43262178c043032e7c42d00de44c818ba05f9967 Patch
https://git.kernel.org/stable/c/5d34225169346cab5145978d153b9ce90e9ace21 Patch
https://git.kernel.org/stable/c/73fdeb612d25b5e105c219e05434285a45d23576 Patch
https://git.kernel.org/stable/c/f6a90818a32058fca62cda3a2027a6a2364e1878 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

09 Jan 2025, 19:52

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/1dfb26df15fc7036a74221d43de7427f74293dae - () https://git.kernel.org/stable/c/1dfb26df15fc7036a74221d43de7427f74293dae - Patch
References () https://git.kernel.org/stable/c/43262178c043032e7c42d00de44c818ba05f9967 - () https://git.kernel.org/stable/c/43262178c043032e7c42d00de44c818ba05f9967 - Patch
References () https://git.kernel.org/stable/c/5d34225169346cab5145978d153b9ce90e9ace21 - () https://git.kernel.org/stable/c/5d34225169346cab5145978d153b9ce90e9ace21 - Patch
References () https://git.kernel.org/stable/c/73fdeb612d25b5e105c219e05434285a45d23576 - () https://git.kernel.org/stable/c/73fdeb612d25b5e105c219e05434285a45d23576 - Patch
References () https://git.kernel.org/stable/c/f6a90818a32058fca62cda3a2027a6a2364e1878 - () https://git.kernel.org/stable/c/f6a90818a32058fca62cda3a2027a6a2364e1878 - Patch
CWE NVD-CWE-noinfo
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/1dfb26df15fc7036a74221d43de7427f74293dae - () https://git.kernel.org/stable/c/1dfb26df15fc7036a74221d43de7427f74293dae -
References () https://git.kernel.org/stable/c/43262178c043032e7c42d00de44c818ba05f9967 - () https://git.kernel.org/stable/c/43262178c043032e7c42d00de44c818ba05f9967 -
References () https://git.kernel.org/stable/c/5d34225169346cab5145978d153b9ce90e9ace21 - () https://git.kernel.org/stable/c/5d34225169346cab5145978d153b9ce90e9ace21 -
References () https://git.kernel.org/stable/c/73fdeb612d25b5e105c219e05434285a45d23576 - () https://git.kernel.org/stable/c/73fdeb612d25b5e105c219e05434285a45d23576 -
References () https://git.kernel.org/stable/c/f6a90818a32058fca62cda3a2027a6a2364e1878 - () https://git.kernel.org/stable/c/f6a90818a32058fca62cda3a2027a6a2364e1878 -

01 Mar 2024, 14:04

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: m68k: mvme147,mvme16x: No borre los bits de configuración del temporizador PCC. No borre los bits de configuración del temporizador 1 al borrar el indicador de interrupción y el desbordamiento del contador. Como informó Michael, "Esto da como resultado que no se entreguen interrupciones del temporizador después de la primera. Luego, la inicialización se bloquea en calibrate_delay porque el contador de santiamén no se actualiza". En mvme16x, habilite el temporizador después de solicitar irq, de acuerdo con mvme147.

29 Feb 2024, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-29 23:15

Updated : 2025-01-09 19:52

NVD link : CVE-2021-47016

Mitre link : CVE-2021-47016

CVE.ORG link : CVE-2021-47016

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo