CVE-2021-47138

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47138
In the Linux kernel, the following vulnerability has been resolved: cxgb4: avoid accessing registers when clearing filters Hardware register having the server TID base can contain invalid values when adapter is in bad state (for example, due to AER fatal error). Reading these invalid values in the register can lead to out-of-bound memory access. So, fix by using the saved server TID base when clearing filters.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/02f03883fdb10ad7e66717c70ea163a8d27ae6e7 Patch
https://git.kernel.org/stable/c/0bf49b3c8d8b3a43ce09f1b2db70e5484d31fcdf Patch
https://git.kernel.org/stable/c/285207a558ab456aa7d8aa877ecc7e91fcc51710 Patch
https://git.kernel.org/stable/c/88c380df84fbd03f9b137c2b9d0a44b9f2f553b0 Patch
https://git.kernel.org/stable/c/02f03883fdb10ad7e66717c70ea163a8d27ae6e7 Patch
https://git.kernel.org/stable/c/0bf49b3c8d8b3a43ce09f1b2db70e5484d31fcdf Patch
https://git.kernel.org/stable/c/285207a558ab456aa7d8aa877ecc7e91fcc51710 Patch
https://git.kernel.org/stable/c/88c380df84fbd03f9b137c2b9d0a44b9f2f553b0 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
History

13 Mar 2025, 21:09

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/02f03883fdb10ad7e66717c70ea163a8d27ae6e7 - () https://git.kernel.org/stable/c/02f03883fdb10ad7e66717c70ea163a8d27ae6e7 - Patch
References () https://git.kernel.org/stable/c/0bf49b3c8d8b3a43ce09f1b2db70e5484d31fcdf - () https://git.kernel.org/stable/c/0bf49b3c8d8b3a43ce09f1b2db70e5484d31fcdf - Patch
References () https://git.kernel.org/stable/c/285207a558ab456aa7d8aa877ecc7e91fcc51710 - () https://git.kernel.org/stable/c/285207a558ab456aa7d8aa877ecc7e91fcc51710 - Patch
References () https://git.kernel.org/stable/c/88c380df84fbd03f9b137c2b9d0a44b9f2f553b0 - () https://git.kernel.org/stable/c/88c380df84fbd03f9b137c2b9d0a44b9f2f553b0 - Patch
CWE CWE-787
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
CPE cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/02f03883fdb10ad7e66717c70ea163a8d27ae6e7 - () https://git.kernel.org/stable/c/02f03883fdb10ad7e66717c70ea163a8d27ae6e7 -
References () https://git.kernel.org/stable/c/0bf49b3c8d8b3a43ce09f1b2db70e5484d31fcdf - () https://git.kernel.org/stable/c/0bf49b3c8d8b3a43ce09f1b2db70e5484d31fcdf -
References () https://git.kernel.org/stable/c/285207a558ab456aa7d8aa877ecc7e91fcc51710 - () https://git.kernel.org/stable/c/285207a558ab456aa7d8aa877ecc7e91fcc51710 -
References () https://git.kernel.org/stable/c/88c380df84fbd03f9b137c2b9d0a44b9f2f553b0 - () https://git.kernel.org/stable/c/88c380df84fbd03f9b137c2b9d0a44b9f2f553b0 -

25 Mar 2024, 13:47

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: cxgb4: evita acceder a los registros al borrar los filtros El registro de hardware que tiene la base TID del servidor puede contener valores no válidos cuando el adaptador está en mal estado (por ejemplo, debido a un error fatal de AER). Leer estos valores no válidos en el registro puede provocar un acceso a la memoria fuera de límites. Por lo tanto, solucione el problema utilizando la base TID del servidor guardado al borrar los filtros.

25 Mar 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-25 09:15

Updated : 2025-03-13 21:09

NVD link : CVE-2021-47138

Mitre link : CVE-2021-47138

CVE.ORG link : CVE-2021-47138

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write