Vulnerability-Lookup

SUSE-SU-2024:3251-1

Vulnerability from csaf_suse - Published: 2024-09-16 08:57 - Updated: 2026-09-20 16:59

Summary

Security update for the Linux Kernel

Severity

Important

Notes

Title of the patch: Security update for the Linux Kernel

Description of the patch: The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-35965: Fix not validating setsockopt user input (bsc#1224579). - CVE-2024-35933: Fixed build regression (bsc#1224640). - CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707). - CVE-2024-41062: Sync sock recv cb and release (bsc#1228576). - CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156) - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500). - CVE-2024-43863: Fix a deadlock in dma buf fence polling (bsc#1229497) - CVE-2024-41087: Fix double free on error (bsc#1228466). - CVE-2024-43907: Fix the null pointer dereference in apply_state_adjust_rules (bsc#1229787). - CVE-2024-43905: Fix the null pointer dereference for vega10_hwmgr (bsc#1229784). - CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759). - CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756). - CVE-2024-43902: Add null checker before passing variables (bsc#1229767). - CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658). - CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808). - CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503) - CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495). - CVE-2022-48910: Ensure we call ipv6_mc_down() at most once (bsc#1229632) - CVE-2023-52893: Fix null-deref in gsmi_get_variable (bsc#1229535) - CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733). - CVE-2022-48875: Initialize struct pn533_out_arg properly (bsc#1229516). - CVE-2023-52907: Wait for out_urb's completion in pn533_usb_send_frame() (bsc#1229526). - CVE-2024-43871: Fix memory leakage caused by driver API devm_free_percpu() (bsc#1229490) - CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720). - CVE-2024-43872: Fix soft lockup under heavy CEQE load (bsc#1229489) - CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623) - CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709). - CVE-2024-42236: Prevent OOB read/write in usb_string_copy() (bsc#1228964). - CVE-2024-42244: Fix crash on resume (bsc#1228967). - CVE-2024-43879: Handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (bsc#1229482). - CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803). - CVE-2024-36013: Fix slab-use-after-free in l2cap_connect() (bsc#1225578). - CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427). - CVE-2024-41012: Remove locks reliably when fcntl/close race is detected (bsc#1228247). - CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335). - CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290). - CVE-2024-42157: Wipe sensitive data on failure (bsc#1228727). - CVE-2021-47341: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (bsc#1224923). - CVE-2024-43839: Adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301). - CVE-2022-48769: Avoid EFIv2 runtime services on Apple x86 machines (bsc#1226629). - CVE-2024-43856: Fix call order in dmam_free_coherent (bsc#1229346). - CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801) - CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074) - CVE-2024-40984: Revert 'ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.' (bsc#1227820). - CVE-2024-26677: Blacklist e7870cf13d20 (' Fix delayed ACKs to not set the reference serial number') (bsc#1222387) - CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388) - CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382) - CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357) - CVE-2024-42310: Fix null pointer dereference in cdv_intel_lvds_get_modes (bsc#1229358) - CVE-2024-42309: Fix null pointer dereference in psb_intel_lvds_get_modes (bsc#1229359) - CVE-2024-43854: Initialize integrity buffer to zero before writing it to media (bsc#1229345) - CVE-2024-42322: Properly dereference pe in ip_vs_add_service (bsc#1229347) - CVE-2024-42301: Fix the array out-of-bounds risk (bsc#1229407). - CVE-2024-42285: Fix a use-after-free related to destroying CM IDs (bsc#1229381) - CVE-2024-43831: Handle invalid decoder vsi (bsc#1229309). - CVE-2024-42281: Fix a segment issue when downgrading gso_size (bsc#1229386). - CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400) - CVE-2024-38618: Set lower bound of start tick time (bsc#1226754). - CVE-2024-41035: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (bsc#1228485) - CVE-2024-42162: Account for stopped queues when reading NIC stats (bsc#1228706). - CVE-2023-52708: Fix error handling in mmc_spi_probe() (bsc#1225483). - CVE-2021-47549: Fix UAF in sata_fsl_port_stop when rmmod sata_fsl (bsc#1225508). - CVE-2021-47373: Fix potential VPE leak on error (bsc#1225190). - CVE-2021-47425: Fix resource leak in reconfiguration device addition (bsc#1225223). - CVE-2024-42246: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989). - CVE-2024-41098: Fix null pointer dereference on error (bsc#1228467). - CVE-2021-4440: Drop USERGS_SYSRET64 paravirt call ( bsc#1227069). - CVE-2022-48786: Remove vsock from connected table when connect is interrupted by a signal (bsc#1227996). - CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959) - CVE-2024-35915: Fix uninit-value in nci_dev_up and nci_ntf_packet (bsc#1224479). - CVE-2024-38662: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885). - CVE-2024-42110: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (bsc#1228501). - CVE-2024-42148: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487). - CVE-2024-42106: Initialize pad field in struct inet_diag_req_v2 (bsc#1228493). - CVE-2022-48865: Fix kernel panic when enabling bearer (bsc#1228065). - CVE-2024-41068: Fix sclp_init() cleanup on failure (bsc#1228579). - CVE-2024-42082: Remove WARN() from __xdp_reg_mem_model() (bsc#1228482). - CVE-2024-42090: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (bsc#1228449). - CVE-2024-42101: Fix null pointer dereference in nouveau_connector_get_modes (bsc#1228495). - CVE-2024-42228: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (bsc#1228667). - CVE-2021-47257: fix null deref in parse dev addr (bsc#1224896). The following non-security bugs were fixed: - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to (git-fixes) - Bluetooth: L2CAP: Fix deadlock (git-fixes). - btrfs: fix processing of delayed tree block refs during backref walking (bsc#1228982). - btrfs: Remove unused op_key var from add_delayed_refs (bsc#1228982). - cgroup/cpuset: Prevent UAF in proc_cpuset_show() (bsc#1228801). - char: tpm: Protect tpm_pm_suspend with locks (bsc#1082555). - cpu/SMT: Enable SMT only if a core is online (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588 git-fixes). - fuse: Initialize beyond-EOF page contents before setting uptodate (bsc#1229457). - genirq: Delay deactivation in free_irq() (git-fixes). - genirq: Make sure the initial affinity is not empty (git-fixes). - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (git-fixes). - genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() (git-fixes). - genirq/irqdesc: Do not try to remove non-existing sysfs files (git-fixes). - genirq/irqdomain: Check pointer in irq_domain_alloc_irqs_hierarchy() (git-fixes). - genirq/msi: Activate Multi-MSI early when MSI_FLAG_ACTIVATE_EARLY is set (git-fixes). - genirq/msi: Ensure deactivation on teardown (git-fixes). - genirq/proc: Reject invalid affinity masks (again) (git-fixes). - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (git-fixes). - ip6_tunnel: Fix broken GRO (bsc#1226323). - irqdomain: Drop bogus fwspec-mapping error handling (git-fixes). - irqdomain: Fix association race (git-fixes). - irqdomain: Fix domain registration race (git-fixes). - irqdomain: Fix mapping-creation race (git-fixes). - irqdomain: Fixed unbalanced fwnode get and put (git-fixes). - irqdomain: Look for existing mapping only once (git-fixes). - irqdomain: Refactor __irq_domain_alloc_irqs() (git-fixes). - kABI: do not change return type of tpm_tis_update_timeouts (bsc#1082555). - kABI: do not rename tpm_do_selftest, tpm_pcr_read_dev, and tpm1_getcap (bsc#1082555). - kABI: Do not rename tpm_getcap (bsc#1082555). - kABI: genirq: Delay deactivation in free_irq() (kabi git-fixes). - kABI: Hide the new last_cc member in a hole in struct tpm_chip (bsc#1082555). - kABI: Instead of changing the pcr argument type add a local variable of the desired type, and assign it from the actual argument (bsc#1082555). - kABI: no need to store the tpm long long duration in tpm_chip struct, it is an arbitrary hardcoded value (bsc#1082555). - kABI: re-export tpm2_calc_ordinal_duration (bsc#1082555). - kABI: tpm-interface: Hide new include from genksyms (bsc#1082555). - kABI: tpm2-space: Do not add buf_size to struct tpm_space (bsc#1082555). - kabi/severities: Ignore tpm_transmit_cmd and tpm_tis_core_init (bsc#1082555). - KVM: s390: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID (git-fixes bsc#1229222). - memcg: protect concurrent access to mem_cgroup_idr (git-fixes). - net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (bsc#1229154). - net: mana: Fix race on per-CQ variable napi work_done (bsc#1229154). - netfilter: nf_conntrack_h323: restore boundary check correctness (bsc#1223074) - netfilter: nf_ct_h323: Convert CHECK_BOUND macro to function (bsc#1223074) - netfilter: nf_ct_h323: Extend nf_h323_error_boundary to work on bits as well (bsc#1223074) - netfilter: nf_ct_h323: Out Of Bound Read in Netfilter Conntrack (bsc#1223074) - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (git-fixes). - nfc: nci: Fix kcov check in nci_rx_work() (git-fixes). - nfc: nci: Fix uninit-value in nci_rx_work (git-fixes). - powerpc/topology: Check if a core is online (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588 git-fixes). - s390/uv: Panic for set and remove shared access UVC errors (git-fixes bsc#1229229). - scsi: target: core: Silence the message about unknown VPD pages (bsc#1221252 bsc#1229462). - tpm_tis_core: Turn on the TPM before probing IRQ's (bsc#1082555). - tpm_tis: Add a check for invalid status (bsc#1082555). - tpm_tis: Explicitly check for error code (bsc#1082555). - tpm_tis: Fix an error handling path in 'tpm_tis_core_init()' (bsc#1082555). - tpm_tis: Resend command to recover from data transfer errors (bsc#1082555). - tpm_tis: reserve chip for duration of tpm_tis_core_init (bsc#1082555). - tpm_tis: Use tpm_chip_{start,stop} decoration inside tpm_tis_resume (bsc#1082555). - tpm, tpm_tis: Avoid cache incoherency in test for interrupts (bsc#1082555). - tpm, tpm_tis: Claim locality before writing interrupt registers (bsc#1082555). - tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (bsc#1082555). - tpm, tpm_tis: Claim locality when interrupts are reenabled on resume (bsc#1082555). - tpm, tpm_tis: correct tpm_tis_flags enumeration values (bsc#1082555). - tpm, tpm_tis: Decorate tpm_get_timeouts() with request_locality() (bsc#1082555). - tpm, tpm_tis: Decorate tpm_tis_gen_interrupt() with request_locality() (bsc#1082555). - tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (bsc#1082555). - tpm, tpm_tis: Do not skip reset of original interrupt vector (bsc#1082555). - tpm, tpm_tis: Extend locality handling to TPM2 in tpm_tis_gen_interrupt() (bsc#1082555). - tpm, tpm_tis: Only handle supported interrupts (bsc#1082555). - tpm, tpm_tis: Reserve locality in tpm_tis_resume() (bsc#1082555). - tpm, tpm: Implement usage counter for locality (bsc#1082555). - tpm, tpmrm: Mark tpmrm_write as static (bsc#1082555). - tpm: access command header through struct in tpm_try_transmit() (bsc#1082555). - tpm: Actually fail on TPM errors during 'get random' (bsc#1082555). - tpm: Add a flag to indicate TPM power is managed by firmware (bsc#1082555). - tpm: add ptr to the tpm_space struct to file_priv (bsc#1082555). - tpm: add support for nonblocking operation (bsc#1082555). - tpm: add support for partial reads (bsc#1082555). - tpm: add tpm_auto_startup() into tpm-interface.c (bsc#1082555). - tpm: add tpm_calc_ordinal_duration() wrapper (bsc#1082555). - tpm: Allow system suspend to continue when TPM suspend fails (bsc#1082555). - tpm: clean up tpm_try_transmit() error handling flow (bsc#1082555). - tpm: declare struct tpm_header (bsc#1082555). - tpm: do not return bool from update_timeouts (bsc#1082555). - tpm: encapsulate tpm_dev_transmit() (bsc#1082555). - tpm: factor out tpm 1.x duration calculation to tpm1-cmd.c (bsc#1082555). - tpm: factor out tpm 1.x pm suspend flow into tpm1-cmd.c (bsc#1082555). - tpm: factor out tpm_get_timeouts() (bsc#1082555). - tpm: factor out tpm_startup function (bsc#1082555). - tpm: factor out tpm1_get_random into tpm1-cmd.c (bsc#1082555). - tpm: fix an invalid condition in tpm_common_poll (bsc#1082555). - tpm: fix Atmel TPM crash caused by too frequent queries (bsc#1082555). - tpm: Fix buffer access in tpm2_get_tpm_pt() (bsc#1082555). - tpm: fix buffer type in tpm_transmit_cmd (bsc#1082555). - tpm: fix byte order related arithmetic inconsistency in tpm_getcap() (bsc#1082555). - tpm: Fix error handling in async work (bsc#1082555). - tpm: fix invalid locking in NONBLOCKING mode (bsc#1082555). - tpm: fix invalid return value in pubek_show() (bsc#1082555). - tpm: fix NPE on probe for missing device (bsc#1082555). - tpm: Fix null pointer dereference on chip register error path (bsc#1082555). - tpm: Fix TIS locality timeout problems (bsc#1082555). - tpm: Handle negative priv->response_len in tpm_common_read() (bsc#1082555). - tpm: introduce tpm_chip_start() and tpm_chip_stop() (bsc#1082555). - tpm: migrate pubek_show to struct tpm_buf (bsc#1082555). - tpm: migrate tpm2_get_random() to use struct tpm_buf (bsc#1082555). - tpm: migrate tpm2_get_tpm_pt() to use struct tpm_buf (bsc#1082555). - tpm: migrate tpm2_probe() to use struct tpm_buf (bsc#1082555). - tpm: migrate tpm2_shutdown() to use struct tpm_buf (bsc#1082555). - tpm: move TPM 1.2 code of tpm_pcr_extend() to tpm1_pcr_extend() (bsc#1082555). - tpm: move tpm 1.x selftest code from tpm-interface.c tpm1-cmd.c (bsc#1082555). - tpm: move TPM space code out of tpm_transmit() (bsc#1082555). - tpm: move tpm_getcap to tpm1-cmd.c (bsc#1082555). - tpm: move tpm_validate_commmand() to tpm2-space.c (bsc#1082555). - tpm: move tpm1_pcr_extend to tpm1-cmd.c (bsc#1082555). - tpm: Prevent hwrng from activating during resume (bsc#1082555). - tpm: print tpm2_commit_space() error inside tpm2_commit_space() (bsc#1082555). - tpm: remove @flags from tpm_transmit() (bsc#1082555). - tpm: remove @space from tpm_transmit() (bsc#1082555). - tpm: remove struct tpm_pcrextend_in (bsc#1082555). - tpm: Remove tpm_dev_wq_lock (bsc#1082555). - tpm: remove TPM_TRANSMIT_UNLOCKED flag (bsc#1082555). - tpm: rename tpm_chip_find_get() to tpm_find_get_ops() (bsc#1082555). - tpm: replace TPM_TRANSMIT_RAW with TPM_TRANSMIT_NESTED (bsc#1082555). - tpm: Replace WARN_ONCE() with dev_err_once() in tpm_tis_status() (bsc#1082555). - tpm: return 0 from pcrs_show() when tpm1_pcr_read() fails (bsc#1082555). - tpm: Revert 'tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts' (bsc#1082555). - tpm: Revert 'tpm_tis_core: Turn on the TPM before probing IRQ's' (bsc#1082555). - tpm: Revert 'tpm_tis: reserve chip for duration of tpm_tis_core_init' (bsc#1082555). - tpm: take TPM chip power gating out of tpm_transmit() (bsc#1082555). - tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak (bsc#1082555). - tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak (bsc#1082555). - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (bsc#1082555). - tpm: tpm1_bios_measurements_next should increase position index (bsc#1082555). - tpm: tpm1: rewrite tpm1_get_random() using tpm_buf structure (bsc#1082555). - tpm: turn on TPM on suspend for TPM 1.x (bsc#1082555). - tpm: Unify the mismatching TPM space buffer sizes (bsc#1082555). - tpm: use tpm_buf in tpm_transmit_cmd() as the IO parameter (bsc#1082555). - tpm: use tpm_msleep() value as max delay (bsc#1082555). - tpm: use tpm_try_get_ops() in tpm-sysfs.c (bsc#1082555). - tpm: use u32 instead of int for PCR index (bsc#1082555). - tpm: vtpm_proxy: Avoid reading host log when using a virtual device (bsc#1082555). - tpm: vtpm_proxy: Prevent userspace from sending driver command (bsc#1082555). - tpm: Wrap the buffer from the caller to tpm_buf in tpm_send() (bsc#1082555). - tpm/tpm_crb: Fix error message in __crb_relinquish_locality() (bsc#1082555). - tpm1: implement tpm1_pcr_read_dev() using tpm_buf structure (bsc#1082555). - tpm1: reimplement SAVESTATE using tpm_buf (bsc#1082555). - tpm1: reimplement tpm1_continue_selftest() using tpm_buf (bsc#1082555). - tpm1: rename tpm1_pcr_read_dev to tpm1_pcr_read() (bsc#1082555). - tpm2: add longer timeouts for creation commands (bsc#1082555). - vfio/pci: fix potential memory leak in vfio_intx_enable() (git-fixes). - vsock: correct removal of socket from the list (bsc#1227996). - xfs: fix getfsmap reporting past the last rt extent (git-fixes). - xfs: Fix the owner setting issue for rmap query in xfs fsmap (git-fixes). - xfs: fix uninitialized variable access (git-fixes).

Patchnames: SUSE-2024-3251,SUSE-SLE-HA-12-SP5-2024-3251,SUSE-SLE-Live-Patching-12-SP5-2024-3251,SUSE-SLE-SDK-12-SP5-2024-3251,SUSE-SLE-SERVER-12-SP5-2024-3251,SUSE-SLE-WE-12-SP5-2024-3251

CVE-2021-4440

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Affected products

Recommended 57 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-0:4.12.14-122.228.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-0:4.12.14-122.228.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-0:4.12.14-122.228.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-0:4.12.14-122.228.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-0:4.12.14-122.228.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-0:4.12.14-122.228.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-0:4.12.14-122.228.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-0:4.12.14-122.228.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-0:4.12.14-122.228.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-0:4.12.14-122.228.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-0:4.12.14-122.228.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-0:4.12.14-122.228.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-0:4.12.14-122.228.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-0:4.12.14-122.228.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-0:4.12.14-122.228.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-0:4.12.14-122.228.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-base-0:4.12.14-122.228.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-base-0:4.12.14-122.228.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-base-0:4.12.14-122.228.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-base-0:4.12.14-122.228.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-devel-0:4.12.14-122.228.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-devel-0:4.12.14-122.228.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-devel-0:4.12.14-122.228.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-devel-0:4.12.14-122.228.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default-man-0:4.12.14-122.228.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-devel-0:4.12.14-122.228.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-macros-0:4.12.14-122.228.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-source-0:4.12.14-122.228.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-syms-0:4.12.14-122.228.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-syms-0:4.12.14-122.228.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-syms-0:4.12.14-122.228.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-syms-0:4.12.14-122.228.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-0:4.12.14-122.228.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-0:4.12.14-122.228.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-0:4.12.14-122.228.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-0:4.12.14-122.228.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-0:4.12.14-122.228.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-0:4.12.14-122.228.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_228-default-0:1-8.3.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_228-default-0:1-8.3.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_228-default-0:1-8.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-docs-0:4.12.14-122.228.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-obs-build-0:4.12.14-122.228.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-obs-build-0:4.12.14-122.228.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-obs-build-0:4.12.14-122.228.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-obs-build-0:4.12.14-122.228.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-docs-0:4.12.14-122.228.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-obs-build-0:4.12.14-122.228.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-obs-build-0:4.12.14-122.228.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-obs-build-0:4.12.14-122.228.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-obs-build-0:4.12.14-122.228.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-0:4.12.14-122.228.2.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-0:4.12.14-122.228.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-0:4.12.14-122.228.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-0:4.12.14-122.228.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-0:4.12.14-122.228.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-0:4.12.14-122.228.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2021-47257

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2021-47289

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2021-47341

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2021-47373

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2021-47425

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2021-47549

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2022-48751

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2022-48769

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2022-48786

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2022-48822

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact important

CVE-2022-48865

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2022-48875

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2022-48896

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2022-48899

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2022-48905

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2022-48910

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2022-48919

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2022-48920

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2022-48925

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2022-48930

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2022-48931

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2022-48938

6.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2023-2176

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact important

CVE-2023-52708

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2023-52893

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2023-52901

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2023-52907

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-26668

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-26677

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-26812

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-26851

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-27011

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-35915

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-35933

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-35965

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-36013

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-36270

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-36286

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-38618

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-38662

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-39489

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-40984

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-41012

6.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-41016

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-41020

6.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-41035

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-41062

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact important

CVE-2024-41068

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-41087

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact important

CVE-2024-41097

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-41098

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42077

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42082

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42090

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42101

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42106

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42110

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42148

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42155

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42157

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42158

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42162

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42226

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42228

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42232

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact important

CVE-2024-42236

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42240

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42244

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42246

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42259

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42271

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact important

CVE-2024-42280

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42281

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42284

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42285

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42286

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42287

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42288

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42289

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42301

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42309

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42310

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42312

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-42322

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43819

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43831

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43839

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43853

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43854

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43856

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43861

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact important

CVE-2024-43863

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43866

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43871

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43872

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43879

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43882

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact important

CVE-2024-43883

6.4 (Medium)


                
                  CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43892

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43893

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43900

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43902

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43905

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

CVE-2024-43907

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 57 products, the same list as for CVE-2021-4440

Threats

Impact moderate

References

453 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-updates/2024…	self
https://bugzilla.suse.com/1082555	self
https://bugzilla.suse.com/1190317	self
https://bugzilla.suse.com/1196516	self
https://bugzilla.suse.com/1205462	self
https://bugzilla.suse.com/1210629	self
https://bugzilla.suse.com/1214285	self
https://bugzilla.suse.com/1216834	self
https://bugzilla.suse.com/1221252	self
https://bugzilla.suse.com/1222335	self
https://bugzilla.suse.com/1222387	self
https://bugzilla.suse.com/1222808	self
https://bugzilla.suse.com/1223074	self
https://bugzilla.suse.com/1223803	self
https://bugzilla.suse.com/1224479	self
https://bugzilla.suse.com/1224579	self
https://bugzilla.suse.com/1224640	self
https://bugzilla.suse.com/1224896	self
https://bugzilla.suse.com/1224923	self
https://bugzilla.suse.com/1224984	self
https://bugzilla.suse.com/1225190	self
https://bugzilla.suse.com/1225223	self
https://bugzilla.suse.com/1225483	self
https://bugzilla.suse.com/1225508	self
https://bugzilla.suse.com/1225578	self
https://bugzilla.suse.com/1226323	self
https://bugzilla.suse.com/1226629	self
https://bugzilla.suse.com/1226653	self
https://bugzilla.suse.com/1226754	self
https://bugzilla.suse.com/1226798	self
https://bugzilla.suse.com/1226801	self
https://bugzilla.suse.com/1226885	self
https://bugzilla.suse.com/1227069	self
https://bugzilla.suse.com/1227623	self
https://bugzilla.suse.com/1227820	self
https://bugzilla.suse.com/1227996	self
https://bugzilla.suse.com/1228065	self
https://bugzilla.suse.com/1228247	self
https://bugzilla.suse.com/1228410	self
https://bugzilla.suse.com/1228427	self
https://bugzilla.suse.com/1228449	self
https://bugzilla.suse.com/1228466	self
https://bugzilla.suse.com/1228467	self
https://bugzilla.suse.com/1228482	self
https://bugzilla.suse.com/1228485	self
https://bugzilla.suse.com/1228487	self
https://bugzilla.suse.com/1228493	self
https://bugzilla.suse.com/1228495	self
https://bugzilla.suse.com/1228501	self
https://bugzilla.suse.com/1228513	self
https://bugzilla.suse.com/1228516	self
https://bugzilla.suse.com/1228576	self
https://bugzilla.suse.com/1228579	self
https://bugzilla.suse.com/1228667	self
https://bugzilla.suse.com/1228706	self
https://bugzilla.suse.com/1228709	self
https://bugzilla.suse.com/1228720	self
https://bugzilla.suse.com/1228727	self
https://bugzilla.suse.com/1228733	self
https://bugzilla.suse.com/1228801	self
https://bugzilla.suse.com/1228850	self
https://bugzilla.suse.com/1228959	self
https://bugzilla.suse.com/1228964	self
https://bugzilla.suse.com/1228966	self
https://bugzilla.suse.com/1228967	self
https://bugzilla.suse.com/1228982	self
https://bugzilla.suse.com/1228989	self
https://bugzilla.suse.com/1229154	self
https://bugzilla.suse.com/1229156	self
https://bugzilla.suse.com/1229222	self
https://bugzilla.suse.com/1229229	self
https://bugzilla.suse.com/1229290	self
https://bugzilla.suse.com/1229292	self
https://bugzilla.suse.com/1229301	self
https://bugzilla.suse.com/1229309	self
https://bugzilla.suse.com/1229327	self
https://bugzilla.suse.com/1229345	self
https://bugzilla.suse.com/1229346	self
https://bugzilla.suse.com/1229347	self
https://bugzilla.suse.com/1229357	self
https://bugzilla.suse.com/1229358	self
https://bugzilla.suse.com/1229359	self
https://bugzilla.suse.com/1229381	self
https://bugzilla.suse.com/1229382	self
https://bugzilla.suse.com/1229386	self
https://bugzilla.suse.com/1229388	self
https://bugzilla.suse.com/1229392	self
https://bugzilla.suse.com/1229395	self
https://bugzilla.suse.com/1229398	self
https://bugzilla.suse.com/1229399	self
https://bugzilla.suse.com/1229400	self
https://bugzilla.suse.com/1229407	self
https://bugzilla.suse.com/1229457	self
https://bugzilla.suse.com/1229462	self
https://bugzilla.suse.com/1229482	self
https://bugzilla.suse.com/1229489	self
https://bugzilla.suse.com/1229490	self
https://bugzilla.suse.com/1229495	self
https://bugzilla.suse.com/1229497	self
https://bugzilla.suse.com/1229500	self
https://bugzilla.suse.com/1229503	self
https://bugzilla.suse.com/1229516	self
https://bugzilla.suse.com/1229526	self
https://bugzilla.suse.com/1229531	self
https://bugzilla.suse.com/1229535	self
https://bugzilla.suse.com/1229536	self
https://bugzilla.suse.com/1229540	self
https://bugzilla.suse.com/1229604	self
https://bugzilla.suse.com/1229623	self
https://bugzilla.suse.com/1229624	self
https://bugzilla.suse.com/1229630	self
https://bugzilla.suse.com/1229632	self
https://bugzilla.suse.com/1229657	self
https://bugzilla.suse.com/1229658	self
https://bugzilla.suse.com/1229664	self
https://bugzilla.suse.com/1229707	self
https://bugzilla.suse.com/1229756	self
https://bugzilla.suse.com/1229759	self
https://bugzilla.suse.com/1229761	self
https://bugzilla.suse.com/1229767	self
https://bugzilla.suse.com/1229784	self
https://bugzilla.suse.com/1229787	self
https://bugzilla.suse.com/1229851	self
https://www.suse.com/security/cve/CVE-2021-4440/	self
https://www.suse.com/security/cve/CVE-2021-47257/	self
https://www.suse.com/security/cve/CVE-2021-47289/	self
https://www.suse.com/security/cve/CVE-2021-47341/	self
https://www.suse.com/security/cve/CVE-2021-47373/	self
https://www.suse.com/security/cve/CVE-2021-47425/	self
https://www.suse.com/security/cve/CVE-2021-47549/	self
https://www.suse.com/security/cve/CVE-2022-48751/	self
https://www.suse.com/security/cve/CVE-2022-48769/	self
https://www.suse.com/security/cve/CVE-2022-48786/	self
https://www.suse.com/security/cve/CVE-2022-48822/	self
https://www.suse.com/security/cve/CVE-2022-48865/	self
https://www.suse.com/security/cve/CVE-2022-48875/	self
https://www.suse.com/security/cve/CVE-2022-48896/	self
https://www.suse.com/security/cve/CVE-2022-48899/	self
https://www.suse.com/security/cve/CVE-2022-48905/	self
https://www.suse.com/security/cve/CVE-2022-48910/	self
https://www.suse.com/security/cve/CVE-2022-48919/	self
https://www.suse.com/security/cve/CVE-2022-48920/	self
https://www.suse.com/security/cve/CVE-2022-48925/	self
https://www.suse.com/security/cve/CVE-2022-48930/	self
https://www.suse.com/security/cve/CVE-2022-48931/	self
https://www.suse.com/security/cve/CVE-2022-48938/	self
https://www.suse.com/security/cve/CVE-2023-2176/	self
https://www.suse.com/security/cve/CVE-2023-52708/	self
https://www.suse.com/security/cve/CVE-2023-52893/	self
https://www.suse.com/security/cve/CVE-2023-52901/	self
https://www.suse.com/security/cve/CVE-2023-52907/	self
https://www.suse.com/security/cve/CVE-2024-26668/	self
https://www.suse.com/security/cve/CVE-2024-26677/	self
https://www.suse.com/security/cve/CVE-2024-26812/	self
https://www.suse.com/security/cve/CVE-2024-26851/	self
https://www.suse.com/security/cve/CVE-2024-27011/	self
https://www.suse.com/security/cve/CVE-2024-35915/	self
https://www.suse.com/security/cve/CVE-2024-35933/	self
https://www.suse.com/security/cve/CVE-2024-35965/	self
https://www.suse.com/security/cve/CVE-2024-36013/	self
https://www.suse.com/security/cve/CVE-2024-36270/	self
https://www.suse.com/security/cve/CVE-2024-36286/	self
https://www.suse.com/security/cve/CVE-2024-38618/	self
https://www.suse.com/security/cve/CVE-2024-38662/	self
https://www.suse.com/security/cve/CVE-2024-39489/	self
https://www.suse.com/security/cve/CVE-2024-40984/	self
https://www.suse.com/security/cve/CVE-2024-41012/	self
https://www.suse.com/security/cve/CVE-2024-41016/	self
https://www.suse.com/security/cve/CVE-2024-41020/	self
https://www.suse.com/security/cve/CVE-2024-41035/	self
https://www.suse.com/security/cve/CVE-2024-41062/	self
https://www.suse.com/security/cve/CVE-2024-41068/	self
https://www.suse.com/security/cve/CVE-2024-41087/	self
https://www.suse.com/security/cve/CVE-2024-41097/	self
https://www.suse.com/security/cve/CVE-2024-41098/	self
https://www.suse.com/security/cve/CVE-2024-42077/	self
https://www.suse.com/security/cve/CVE-2024-42082/	self
https://www.suse.com/security/cve/CVE-2024-42090/	self
https://www.suse.com/security/cve/CVE-2024-42101/	self
https://www.suse.com/security/cve/CVE-2024-42106/	self
https://www.suse.com/security/cve/CVE-2024-42110/	self
https://www.suse.com/security/cve/CVE-2024-42148/	self
https://www.suse.com/security/cve/CVE-2024-42155/	self
https://www.suse.com/security/cve/CVE-2024-42157/	self
https://www.suse.com/security/cve/CVE-2024-42158/	self
https://www.suse.com/security/cve/CVE-2024-42162/	self
https://www.suse.com/security/cve/CVE-2024-42226/	self
https://www.suse.com/security/cve/CVE-2024-42228/	self
https://www.suse.com/security/cve/CVE-2024-42232/	self
https://www.suse.com/security/cve/CVE-2024-42236/	self
https://www.suse.com/security/cve/CVE-2024-42240/	self
https://www.suse.com/security/cve/CVE-2024-42244/	self
https://www.suse.com/security/cve/CVE-2024-42246/	self
https://www.suse.com/security/cve/CVE-2024-42259/	self
https://www.suse.com/security/cve/CVE-2024-42271/	self
https://www.suse.com/security/cve/CVE-2024-42280/	self
https://www.suse.com/security/cve/CVE-2024-42281/	self
https://www.suse.com/security/cve/CVE-2024-42284/	self
https://www.suse.com/security/cve/CVE-2024-42285/	self
https://www.suse.com/security/cve/CVE-2024-42286/	self
https://www.suse.com/security/cve/CVE-2024-42287/	self
https://www.suse.com/security/cve/CVE-2024-42288/	self
https://www.suse.com/security/cve/CVE-2024-42289/	self
https://www.suse.com/security/cve/CVE-2024-42301/	self
https://www.suse.com/security/cve/CVE-2024-42309/	self
https://www.suse.com/security/cve/CVE-2024-42310/	self
https://www.suse.com/security/cve/CVE-2024-42312/	self
https://www.suse.com/security/cve/CVE-2024-42322/	self
https://www.suse.com/security/cve/CVE-2024-43819/	self
https://www.suse.com/security/cve/CVE-2024-43831/	self
https://www.suse.com/security/cve/CVE-2024-43839/	self
https://www.suse.com/security/cve/CVE-2024-43853/	self
https://www.suse.com/security/cve/CVE-2024-43854/	self
https://www.suse.com/security/cve/CVE-2024-43856/	self
https://www.suse.com/security/cve/CVE-2024-43861/	self
https://www.suse.com/security/cve/CVE-2024-43863/	self
https://www.suse.com/security/cve/CVE-2024-43866/	self
https://www.suse.com/security/cve/CVE-2024-43871/	self
https://www.suse.com/security/cve/CVE-2024-43872/	self
https://www.suse.com/security/cve/CVE-2024-43879/	self
https://www.suse.com/security/cve/CVE-2024-43882/	self
https://www.suse.com/security/cve/CVE-2024-43883/	self
https://www.suse.com/security/cve/CVE-2024-43892/	self
https://www.suse.com/security/cve/CVE-2024-43893/	self
https://www.suse.com/security/cve/CVE-2024-43900/	self
https://www.suse.com/security/cve/CVE-2024-43902/	self
https://www.suse.com/security/cve/CVE-2024-43905/	self
https://www.suse.com/security/cve/CVE-2024-43907/	self
https://www.suse.com/security/cve/CVE-2021-4440	external
https://bugzilla.suse.com/1227069	external
https://www.suse.com/security/cve/CVE-2021-47257	external
https://bugzilla.suse.com/1224896	external
https://www.suse.com/security/cve/CVE-2021-47289	external
https://bugzilla.suse.com/1224984	external
https://www.suse.com/security/cve/CVE-2021-47341	external
https://bugzilla.suse.com/1224923	external
https://www.suse.com/security/cve/CVE-2021-47373	external
https://bugzilla.suse.com/1225190	external
https://www.suse.com/security/cve/CVE-2021-47425	external
https://bugzilla.suse.com/1225223	external
https://www.suse.com/security/cve/CVE-2021-47549	external
https://bugzilla.suse.com/1225508	external
https://bugzilla.suse.com/1227654	external
https://www.suse.com/security/cve/CVE-2022-48751	external
https://bugzilla.suse.com/1226653	external
https://www.suse.com/security/cve/CVE-2022-48769	external
https://bugzilla.suse.com/1226629	external
https://www.suse.com/security/cve/CVE-2022-48786	external
https://bugzilla.suse.com/1227996	external
https://www.suse.com/security/cve/CVE-2022-48822	external
https://bugzilla.suse.com/1228040	external
https://bugzilla.suse.com/1228136	external
https://www.suse.com/security/cve/CVE-2022-48865	external
https://bugzilla.suse.com/1228065	external
https://www.suse.com/security/cve/CVE-2022-48875	external
https://bugzilla.suse.com/1229516	external
https://www.suse.com/security/cve/CVE-2022-48896	external
https://bugzilla.suse.com/1229540	external
https://www.suse.com/security/cve/CVE-2022-48899	external
https://bugzilla.suse.com/1229536	external
https://www.suse.com/security/cve/CVE-2022-48905	external
https://bugzilla.suse.com/1229604	external
https://www.suse.com/security/cve/CVE-2022-48910	external
https://bugzilla.suse.com/1229632	external
https://www.suse.com/security/cve/CVE-2022-48919	external
https://bugzilla.suse.com/1229657	external
https://bugzilla.suse.com/1229660	external
https://www.suse.com/security/cve/CVE-2022-48920	external
https://bugzilla.suse.com/1229658	external
https://www.suse.com/security/cve/CVE-2022-48925	external
https://bugzilla.suse.com/1229630	external
https://www.suse.com/security/cve/CVE-2022-48930	external
https://bugzilla.suse.com/1229624	external
https://www.suse.com/security/cve/CVE-2022-48931	external
https://bugzilla.suse.com/1229623	external
https://www.suse.com/security/cve/CVE-2022-48938	external
https://bugzilla.suse.com/1229664	external
https://www.suse.com/security/cve/CVE-2023-2176	external
https://bugzilla.suse.com/1210629	external
https://bugzilla.suse.com/1210630	external
https://bugzilla.suse.com/1213842	external
https://www.suse.com/security/cve/CVE-2023-52708	external
https://bugzilla.suse.com/1225483	external
https://www.suse.com/security/cve/CVE-2023-52893	external
https://bugzilla.suse.com/1229535	external
https://www.suse.com/security/cve/CVE-2023-52901	external
https://bugzilla.suse.com/1229531	external
https://www.suse.com/security/cve/CVE-2023-52907	external
https://bugzilla.suse.com/1229526	external
https://www.suse.com/security/cve/CVE-2024-26668	external
https://bugzilla.suse.com/1222335	external
https://www.suse.com/security/cve/CVE-2024-26677	external
https://bugzilla.suse.com/1222387	external
https://www.suse.com/security/cve/CVE-2024-26812	external
https://bugzilla.suse.com/1222808	external
https://www.suse.com/security/cve/CVE-2024-26851	external
https://bugzilla.suse.com/1223074	external
https://www.suse.com/security/cve/CVE-2024-27011	external
https://bugzilla.suse.com/1223803	external
https://www.suse.com/security/cve/CVE-2024-35915	external
https://bugzilla.suse.com/1224479	external
https://www.suse.com/security/cve/CVE-2024-35933	external
https://bugzilla.suse.com/1224640	external
https://www.suse.com/security/cve/CVE-2024-35965	external
https://bugzilla.suse.com/1224579	external
https://www.suse.com/security/cve/CVE-2024-36013	external
https://bugzilla.suse.com/1225578	external
https://www.suse.com/security/cve/CVE-2024-36270	external
https://bugzilla.suse.com/1226798	external
https://www.suse.com/security/cve/CVE-2024-36286	external
https://bugzilla.suse.com/1226801	external
https://www.suse.com/security/cve/CVE-2024-38618	external
https://bugzilla.suse.com/1226754	external
https://www.suse.com/security/cve/CVE-2024-38662	external
https://bugzilla.suse.com/1226885	external
https://www.suse.com/security/cve/CVE-2024-39489	external
https://bugzilla.suse.com/1227623	external
https://www.suse.com/security/cve/CVE-2024-40984	external
https://bugzilla.suse.com/1227820	external
https://www.suse.com/security/cve/CVE-2024-41012	external
https://bugzilla.suse.com/1228247	external
https://www.suse.com/security/cve/CVE-2024-41016	external
https://bugzilla.suse.com/1228410	external
https://www.suse.com/security/cve/CVE-2024-41020	external
https://bugzilla.suse.com/1228427	external
https://www.suse.com/security/cve/CVE-2024-41035	external
https://bugzilla.suse.com/1228485	external
https://www.suse.com/security/cve/CVE-2024-41062	external
https://bugzilla.suse.com/1228576	external
https://bugzilla.suse.com/1228578	external
https://www.suse.com/security/cve/CVE-2024-41068	external
https://bugzilla.suse.com/1228579	external
https://www.suse.com/security/cve/CVE-2024-41087	external
https://bugzilla.suse.com/1228466	external
https://bugzilla.suse.com/1228740	external
https://www.suse.com/security/cve/CVE-2024-41097	external
https://bugzilla.suse.com/1228513	external
https://www.suse.com/security/cve/CVE-2024-41098	external
https://bugzilla.suse.com/1228467	external
https://www.suse.com/security/cve/CVE-2024-42077	external
https://bugzilla.suse.com/1228516	external
https://www.suse.com/security/cve/CVE-2024-42082	external
https://bugzilla.suse.com/1228482	external
https://www.suse.com/security/cve/CVE-2024-42090	external
https://bugzilla.suse.com/1228449	external
https://www.suse.com/security/cve/CVE-2024-42101	external
https://bugzilla.suse.com/1228495	external
https://www.suse.com/security/cve/CVE-2024-42106	external
https://bugzilla.suse.com/1228493	external
https://www.suse.com/security/cve/CVE-2024-42110	external
https://bugzilla.suse.com/1228501	external
https://www.suse.com/security/cve/CVE-2024-42148	external
https://bugzilla.suse.com/1228487	external
https://www.suse.com/security/cve/CVE-2024-42155	external
https://bugzilla.suse.com/1228733	external
https://www.suse.com/security/cve/CVE-2024-42157	external
https://bugzilla.suse.com/1228727	external
https://www.suse.com/security/cve/CVE-2024-42158	external
https://bugzilla.suse.com/1228720	external
https://www.suse.com/security/cve/CVE-2024-42162	external
https://bugzilla.suse.com/1228706	external
https://www.suse.com/security/cve/CVE-2024-42226	external
https://bugzilla.suse.com/1228709	external
https://www.suse.com/security/cve/CVE-2024-42228	external
https://bugzilla.suse.com/1228667	external
https://www.suse.com/security/cve/CVE-2024-42232	external
https://bugzilla.suse.com/1228959	external
https://bugzilla.suse.com/1229458	external
https://www.suse.com/security/cve/CVE-2024-42236	external
https://bugzilla.suse.com/1228964	external
https://www.suse.com/security/cve/CVE-2024-42240	external
https://bugzilla.suse.com/1228966	external
https://www.suse.com/security/cve/CVE-2024-42244	external
https://bugzilla.suse.com/1228967	external
https://www.suse.com/security/cve/CVE-2024-42246	external
https://bugzilla.suse.com/1228989	external
https://www.suse.com/security/cve/CVE-2024-42259	external
https://bugzilla.suse.com/1229156	external
https://www.suse.com/security/cve/CVE-2024-42271	external
https://bugzilla.suse.com/1229400	external
https://bugzilla.suse.com/1229401	external
https://www.suse.com/security/cve/CVE-2024-42280	external
https://bugzilla.suse.com/1229388	external
https://www.suse.com/security/cve/CVE-2024-42281	external
https://bugzilla.suse.com/1229386	external
https://www.suse.com/security/cve/CVE-2024-42284	external
https://bugzilla.suse.com/1229382	external
https://www.suse.com/security/cve/CVE-2024-42285	external
https://bugzilla.suse.com/1229381	external
https://www.suse.com/security/cve/CVE-2024-42286	external
https://bugzilla.suse.com/1229395	external
https://www.suse.com/security/cve/CVE-2024-42287	external
https://bugzilla.suse.com/1229392	external
https://www.suse.com/security/cve/CVE-2024-42288	external
https://bugzilla.suse.com/1229398	external
https://www.suse.com/security/cve/CVE-2024-42289	external
https://bugzilla.suse.com/1229399	external
https://www.suse.com/security/cve/CVE-2024-42301	external
https://bugzilla.suse.com/1229407	external
https://www.suse.com/security/cve/CVE-2024-42309	external
https://bugzilla.suse.com/1229359	external
https://www.suse.com/security/cve/CVE-2024-42310	external
https://bugzilla.suse.com/1229358	external
https://www.suse.com/security/cve/CVE-2024-42312	external
https://bugzilla.suse.com/1229357	external
https://www.suse.com/security/cve/CVE-2024-42322	external
https://bugzilla.suse.com/1229347	external
https://www.suse.com/security/cve/CVE-2024-43819	external
https://bugzilla.suse.com/1229290	external
https://www.suse.com/security/cve/CVE-2024-43831	external
https://bugzilla.suse.com/1229309	external
https://www.suse.com/security/cve/CVE-2024-43839	external
https://bugzilla.suse.com/1229301	external
https://www.suse.com/security/cve/CVE-2024-43853	external
https://bugzilla.suse.com/1229292	external
https://www.suse.com/security/cve/CVE-2024-43854	external
https://bugzilla.suse.com/1229345	external
https://www.suse.com/security/cve/CVE-2024-43856	external
https://bugzilla.suse.com/1229346	external
https://www.suse.com/security/cve/CVE-2024-43861	external
https://bugzilla.suse.com/1229500	external
https://bugzilla.suse.com/1229553	external
https://www.suse.com/security/cve/CVE-2024-43863	external
https://bugzilla.suse.com/1229497	external
https://www.suse.com/security/cve/CVE-2024-43866	external
https://bugzilla.suse.com/1229495	external
https://www.suse.com/security/cve/CVE-2024-43871	external
https://bugzilla.suse.com/1229490	external
https://www.suse.com/security/cve/CVE-2024-43872	external
https://bugzilla.suse.com/1229489	external
https://www.suse.com/security/cve/CVE-2024-43879	external
https://bugzilla.suse.com/1229482	external
https://www.suse.com/security/cve/CVE-2024-43882	external
https://bugzilla.suse.com/1229503	external
https://bugzilla.suse.com/1229504	external
https://www.suse.com/security/cve/CVE-2024-43883	external
https://bugzilla.suse.com/1229707	external
https://bugzilla.suse.com/1256508	external
https://www.suse.com/security/cve/CVE-2024-43892	external
https://bugzilla.suse.com/1229761	external
https://www.suse.com/security/cve/CVE-2024-43893	external
https://bugzilla.suse.com/1229759	external
https://www.suse.com/security/cve/CVE-2024-43900	external
https://bugzilla.suse.com/1229756	external
https://www.suse.com/security/cve/CVE-2024-43902	external
https://bugzilla.suse.com/1229767	external
https://www.suse.com/security/cve/CVE-2024-43905	external
https://bugzilla.suse.com/1229784	external
https://www.suse.com/security/cve/CVE-2024-43907	external
https://bugzilla.suse.com/1229787	external

JSON

To clipboard

Loading 2.3 MB of JSON…

CVE-2021-4440 (GCVE-0-2021-4440)

Vulnerability from cvelistv5 – Published: 2024-06-25 14:20 – Updated: 2026-05-11 13:43

Title

x86/xen: Drop USERGS_SYSRET64 paravirt call

Summary

In the Linux kernel, the following vulnerability has been resolved: x86/xen: Drop USERGS_SYSRET64 paravirt call commit afd30525a659ac0ae0904f0cb4a2ca75522c3123 upstream. USERGS_SYSRET64 is used to return from a syscall via SYSRET, but a Xen PV guest will nevertheless use the IRET hypercall, as there is no sysret PV hypercall defined. So instead of testing all the prerequisites for doing a sysret and then mangling the stack for Xen PV again for doing an iret just use the iret exit from the beginning. This can easily be done via an ALTERNATIVE like it is done for the sysenter compat case already. It should be noted that this drops the optimization in Xen for not restoring a few registers when returning to user mode, but it seems as if the saved instructions in the kernel more than compensate for this drop (a kernel build in a Xen PV guest was slightly faster with this patch applied). While at it remove the stale sysret32 remnants. [ pawan: Brad Spengler and Salvatore Bonaccorso <carnil@debian.org> reported a problem with the 5.10 backport commit edc702b4a820 ("x86/entry_64: Add VERW just before userspace transition"). When CONFIG_PARAVIRT_XXL=y, CLEAR_CPU_BUFFERS is not executed in syscall_return_via_sysret path as USERGS_SYSRET64 is runtime patched to: .cpu_usergs_sysret64 = { 0x0f, 0x01, 0xf8, 0x48, 0x0f, 0x07 }, // swapgs; sysretq which is missing CLEAR_CPU_BUFFERS. It turns out dropping USERGS_SYSRET64 simplifies the code, allowing CLEAR_CPU_BUFFERS to be explicitly added to syscall_return_via_sysret path. Below is with CONFIG_PARAVIRT_XXL=y and this patch applied: syscall_return_via_sysret: ... <+342>: swapgs <+345>: xchg %ax,%ax <+347>: verw -0x1a2(%rip) <------ <+354>: sysretq ]

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-06-26 13:55 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

Linux mitre root

References

2 references

URL	Tags
https://git.kernel.org/stable/c/1424ab4bb386df9cc…
https://grsecurity.net/cve-2021-4440_linux_cna_ca…

Impacted products

4 products

Vendor	Product	Version
Linux	Linux	Affected: cea750c99d8f6391080c420f811a46b21bad7cf4 , < 1424ab4bb386df9cc590c73afa55f13e9b00dea2 (git)
Linux	Linux	Affected: 5.10.215 , < 5.10.218 (semver)
linux	linux_kernel	Affected: cea750c99d8f , < 1424ab4bb386 (custom) cpe:2.3:o:linux:linux_kernel:-:::::::*
linux	linux_kernel	Affected: 5.10.215 , < 5.10.218 (custom) cpe:2.3:o:linux:linux_kernel:-:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "linux_kernel",
            "vendor": "linux",
            "versions": [
              {
                "lessThan": "1424ab4bb386",
                "status": "affected",
                "version": "cea750c99d8f",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "linux_kernel",
            "vendor": "linux",
            "versions": [
              {
                "lessThan": "5.10.218",
                "status": "affected",
                "version": "5.10.215",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-4440",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-26T13:55:14.340611Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-26T14:00:48.356Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:30:07.494Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1424ab4bb386df9cc590c73afa55f13e9b00dea2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://grsecurity.net/cve-2021-4440_linux_cna_case_study"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/x86/entry/entry_64.S",
            "arch/x86/include/asm/irqflags.h",
            "arch/x86/include/asm/paravirt.h",
            "arch/x86/include/asm/paravirt_types.h",
            "arch/x86/kernel/asm-offsets_64.c",
            "arch/x86/kernel/paravirt.c",
            "arch/x86/kernel/paravirt_patch.c",
            "arch/x86/xen/enlighten_pv.c",
            "arch/x86/xen/xen-asm.S",
            "arch/x86/xen/xen-ops.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "1424ab4bb386df9cc590c73afa55f13e9b00dea2",
              "status": "affected",
              "version": "cea750c99d8f6391080c420f811a46b21bad7cf4",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/x86/entry/entry_64.S",
            "arch/x86/include/asm/irqflags.h",
            "arch/x86/include/asm/paravirt.h",
            "arch/x86/include/asm/paravirt_types.h",
            "arch/x86/kernel/asm-offsets_64.c",
            "arch/x86/kernel/paravirt.c",
            "arch/x86/kernel/paravirt_patch.c",
            "arch/x86/xen/enlighten_pv.c",
            "arch/x86/xen/xen-asm.S",
            "arch/x86/xen/xen-ops.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "5.10.218",
              "status": "affected",
              "version": "5.10.215",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.218",
                  "versionStartIncluding": "5.10.215",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/xen: Drop USERGS_SYSRET64 paravirt call\n\ncommit afd30525a659ac0ae0904f0cb4a2ca75522c3123 upstream.\n\nUSERGS_SYSRET64 is used to return from a syscall via SYSRET, but\na Xen PV guest will nevertheless use the IRET hypercall, as there\nis no sysret PV hypercall defined.\n\nSo instead of testing all the prerequisites for doing a sysret and\nthen mangling the stack for Xen PV again for doing an iret just use\nthe iret exit from the beginning.\n\nThis can easily be done via an ALTERNATIVE like it is done for the\nsysenter compat case already.\n\nIt should be noted that this drops the optimization in Xen for not\nrestoring a few registers when returning to user mode, but it seems\nas if the saved instructions in the kernel more than compensate for\nthis drop (a kernel build in a Xen PV guest was slightly faster with\nthis patch applied).\n\nWhile at it remove the stale sysret32 remnants.\n\n  [ pawan: Brad Spengler and Salvatore Bonaccorso \u003ccarnil@debian.org\u003e\n\t   reported a problem with the 5.10 backport commit edc702b4a820\n\t   (\"x86/entry_64: Add VERW just before userspace transition\").\n\n\t   When CONFIG_PARAVIRT_XXL=y, CLEAR_CPU_BUFFERS is not executed in\n\t   syscall_return_via_sysret path as USERGS_SYSRET64 is runtime\n\t   patched to:\n\n\t.cpu_usergs_sysret64    = { 0x0f, 0x01, 0xf8,\n\t\t\t\t    0x48, 0x0f, 0x07 }, // swapgs; sysretq\n\n\t   which is missing CLEAR_CPU_BUFFERS. It turns out dropping\n\t   USERGS_SYSRET64 simplifies the code, allowing CLEAR_CPU_BUFFERS\n\t   to be explicitly added to syscall_return_via_sysret path. Below\n\t   is with CONFIG_PARAVIRT_XXL=y and this patch applied:\n\n\t   syscall_return_via_sysret:\n\t   ...\n\t   \u003c+342\u003e:   swapgs\n\t   \u003c+345\u003e:   xchg   %ax,%ax\n\t   \u003c+347\u003e:   verw   -0x1a2(%rip)  \u003c------\n\t   \u003c+354\u003e:   sysretq\n  ]"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:43:58.741Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/1424ab4bb386df9cc590c73afa55f13e9b00dea2"
        },
        {
          "url": "https://grsecurity.net/cve-2021-4440_linux_cna_case_study"
        }
      ],
      "title": "x86/xen: Drop USERGS_SYSRET64 paravirt call",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-4440",
    "datePublished": "2024-06-25T14:20:00.740Z",
    "dateReserved": "2024-06-25T14:16:59.867Z",
    "dateUpdated": "2026-05-11T13:43:58.741Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-47257 (GCVE-0-2021-47257)

Vulnerability from cvelistv5 – Published: 2024-05-21 14:19 – Updated: 2026-05-11 13:51

Title

net: ieee802154: fix null deref in parse dev addr

Summary

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: fix null deref in parse dev addr Fix a logic error that could result in a null deref if the user sets the mode incorrectly for the given addr type.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-05-31 18:51 UTC

CWE

CWE-476 - NULL Pointer Dereference

Assigner

Linux mitre root

References

7 references

URL	Tags
https://git.kernel.org/stable/c/1f95741981c899c47…
https://git.kernel.org/stable/c/c6998ccfefa652bac…
https://git.kernel.org/stable/c/5f728ec65485625e3…
https://git.kernel.org/stable/c/d0f47648b87b6d5f2…
https://git.kernel.org/stable/c/c7836de2cadd88bc2…
https://git.kernel.org/stable/c/fdd51e34f45311ab6…
https://git.kernel.org/stable/c/9fdd04918a4529806…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: a26c5fd7622d4951425131d54a8c99f076fe2068 , < 1f95741981c899c4724647291fec5faa3c777185 (git) Affected: a26c5fd7622d4951425131d54a8c99f076fe2068 , < c6998ccfefa652bac3f9b236821e392af43efa1e (git) Affected: a26c5fd7622d4951425131d54a8c99f076fe2068 , < 5f728ec65485625e30f46e5b4917ff023ad29ea0 (git) Affected: a26c5fd7622d4951425131d54a8c99f076fe2068 , < d0f47648b87b6d5f204cb7f3cbce6d36dab85a67 (git) Affected: a26c5fd7622d4951425131d54a8c99f076fe2068 , < c7836de2cadd88bc2f20f2c5a3d4ef4c73aef627 (git) Affected: a26c5fd7622d4951425131d54a8c99f076fe2068 , < fdd51e34f45311ab6e48d2147cbc2904731b9993 (git) Affected: a26c5fd7622d4951425131d54a8c99f076fe2068 , < 9fdd04918a452980631ecc499317881c1d120b70 (git)
Linux	Linux	Affected: 4.4 Unaffected: 0 , < 4.4 (semver) Unaffected: 4.9.274 , ≤ 4.9.* (semver) Unaffected: 4.14.238 , ≤ 4.14.* (semver) Unaffected: 4.19.196 , ≤ 4.19.* (semver) Unaffected: 5.4.127 , ≤ 5.4.* (semver) Unaffected: 5.10.45 , ≤ 5.10.* (semver) Unaffected: 5.12.12 , ≤ 5.12.* (semver) Unaffected: 5.13 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-47257",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-31T18:51:05.818923Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-476",
                "description": "CWE-476 NULL Pointer Dereference",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-07T16:26:45.246Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:32:08.048Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1f95741981c899c4724647291fec5faa3c777185"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c6998ccfefa652bac3f9b236821e392af43efa1e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/5f728ec65485625e30f46e5b4917ff023ad29ea0"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d0f47648b87b6d5f204cb7f3cbce6d36dab85a67"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c7836de2cadd88bc2f20f2c5a3d4ef4c73aef627"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/fdd51e34f45311ab6e48d2147cbc2904731b9993"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/9fdd04918a452980631ecc499317881c1d120b70"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ieee802154/nl802154.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "1f95741981c899c4724647291fec5faa3c777185",
              "status": "affected",
              "version": "a26c5fd7622d4951425131d54a8c99f076fe2068",
              "versionType": "git"
            },
            {
              "lessThan": "c6998ccfefa652bac3f9b236821e392af43efa1e",
              "status": "affected",
              "version": "a26c5fd7622d4951425131d54a8c99f076fe2068",
              "versionType": "git"
            },
            {
              "lessThan": "5f728ec65485625e30f46e5b4917ff023ad29ea0",
              "status": "affected",
              "version": "a26c5fd7622d4951425131d54a8c99f076fe2068",
              "versionType": "git"
            },
            {
              "lessThan": "d0f47648b87b6d5f204cb7f3cbce6d36dab85a67",
              "status": "affected",
              "version": "a26c5fd7622d4951425131d54a8c99f076fe2068",
              "versionType": "git"
            },
            {
              "lessThan": "c7836de2cadd88bc2f20f2c5a3d4ef4c73aef627",
              "status": "affected",
              "version": "a26c5fd7622d4951425131d54a8c99f076fe2068",
              "versionType": "git"
            },
            {
              "lessThan": "fdd51e34f45311ab6e48d2147cbc2904731b9993",
              "status": "affected",
              "version": "a26c5fd7622d4951425131d54a8c99f076fe2068",
              "versionType": "git"
            },
            {
              "lessThan": "9fdd04918a452980631ecc499317881c1d120b70",
              "status": "affected",
              "version": "a26c5fd7622d4951425131d54a8c99f076fe2068",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ieee802154/nl802154.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.4"
            },
            {
              "lessThan": "4.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.274",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.238",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.196",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.127",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.45",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.12.*",
              "status": "unaffected",
              "version": "5.12.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.274",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.238",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.196",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.127",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.45",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.12.12",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.13",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ieee802154: fix null deref in parse dev addr\n\nFix a logic error that could result in a null deref if the user sets\nthe mode incorrectly for the given addr type."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:51:00.238Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/1f95741981c899c4724647291fec5faa3c777185"
        },
        {
          "url": "https://git.kernel.org/stable/c/c6998ccfefa652bac3f9b236821e392af43efa1e"
        },
        {
          "url": "https://git.kernel.org/stable/c/5f728ec65485625e30f46e5b4917ff023ad29ea0"
        },
        {
          "url": "https://git.kernel.org/stable/c/d0f47648b87b6d5f204cb7f3cbce6d36dab85a67"
        },
        {
          "url": "https://git.kernel.org/stable/c/c7836de2cadd88bc2f20f2c5a3d4ef4c73aef627"
        },
        {
          "url": "https://git.kernel.org/stable/c/fdd51e34f45311ab6e48d2147cbc2904731b9993"
        },
        {
          "url": "https://git.kernel.org/stable/c/9fdd04918a452980631ecc499317881c1d120b70"
        }
      ],
      "title": "net: ieee802154: fix null deref in parse dev addr",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47257",
    "datePublished": "2024-05-21T14:19:51.445Z",
    "dateReserved": "2024-04-10T18:59:19.540Z",
    "dateUpdated": "2026-05-11T13:51:00.238Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-47289 (GCVE-0-2021-47289)

Vulnerability from cvelistv5 – Published: 2024-05-21 14:35 – Updated: 2026-05-11 13:51

Title

ACPI: fix NULL pointer dereference

Summary

In the Linux kernel, the following vulnerability has been resolved: ACPI: fix NULL pointer dereference Commit 71f642833284 ("ACPI: utils: Fix reference counting in for_each_acpi_dev_match()") started doing "acpi_dev_put()" on a pointer that was possibly NULL. That fails miserably, because that helper inline function is not set up to handle that case. Just make acpi_dev_put() silently accept a NULL pointer, rather than calling down to put_device() with an invalid offset off that NULL pointer.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 15:39 UTC

Assigner

Linux mitre root

References

4 references

URL	Tags
https://git.kernel.org/stable/c/38f54217b423c0101…
https://git.kernel.org/stable/c/cae3fa3d8165761f3…
https://git.kernel.org/stable/c/ccf23a0888077a25a…
https://git.kernel.org/stable/c/fc68f42aa737dc15e…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: fe066621c7966fe47fa17c6be6fd81adb3c0509f , < 38f54217b423c0101d03a00feec6fb8ec608b12e (git) Affected: fe066621c7966fe47fa17c6be6fd81adb3c0509f , < cae3fa3d8165761f3000f523b11cfa1cd35206bc (git) Affected: fe066621c7966fe47fa17c6be6fd81adb3c0509f , < ccf23a0888077a25a0793a746c3941db2a7562e4 (git) Affected: fe066621c7966fe47fa17c6be6fd81adb3c0509f , < fc68f42aa737dc15e7665a4101d4168aadb8e4c4 (git)
Linux	Linux	Affected: 5.2 Unaffected: 0 , < 5.2 (semver) Unaffected: 5.4.139 , ≤ 5.4.* (semver) Unaffected: 5.10.57 , ≤ 5.10.* (semver) Unaffected: 5.13.6 , ≤ 5.13.* (semver) Unaffected: 5.14 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:32:08.069Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/38f54217b423c0101d03a00feec6fb8ec608b12e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/cae3fa3d8165761f3000f523b11cfa1cd35206bc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/ccf23a0888077a25a0793a746c3941db2a7562e4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/fc68f42aa737dc15e7665a4101d4168aadb8e4c4"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47289",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:39:29.008509Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:10.100Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "include/acpi/acpi_bus.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "38f54217b423c0101d03a00feec6fb8ec608b12e",
              "status": "affected",
              "version": "fe066621c7966fe47fa17c6be6fd81adb3c0509f",
              "versionType": "git"
            },
            {
              "lessThan": "cae3fa3d8165761f3000f523b11cfa1cd35206bc",
              "status": "affected",
              "version": "fe066621c7966fe47fa17c6be6fd81adb3c0509f",
              "versionType": "git"
            },
            {
              "lessThan": "ccf23a0888077a25a0793a746c3941db2a7562e4",
              "status": "affected",
              "version": "fe066621c7966fe47fa17c6be6fd81adb3c0509f",
              "versionType": "git"
            },
            {
              "lessThan": "fc68f42aa737dc15e7665a4101d4168aadb8e4c4",
              "status": "affected",
              "version": "fe066621c7966fe47fa17c6be6fd81adb3c0509f",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "include/acpi/acpi_bus.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.2"
            },
            {
              "lessThan": "5.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.139",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.57",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.13.*",
              "status": "unaffected",
              "version": "5.13.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.14",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.139",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.57",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.13.6",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.14",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: fix NULL pointer dereference\n\nCommit 71f642833284 (\"ACPI: utils: Fix reference counting in\nfor_each_acpi_dev_match()\") started doing \"acpi_dev_put()\" on a pointer\nthat was possibly NULL.  That fails miserably, because that helper\ninline function is not set up to handle that case.\n\nJust make acpi_dev_put() silently accept a NULL pointer, rather than\ncalling down to put_device() with an invalid offset off that NULL\npointer."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:51:36.649Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/38f54217b423c0101d03a00feec6fb8ec608b12e"
        },
        {
          "url": "https://git.kernel.org/stable/c/cae3fa3d8165761f3000f523b11cfa1cd35206bc"
        },
        {
          "url": "https://git.kernel.org/stable/c/ccf23a0888077a25a0793a746c3941db2a7562e4"
        },
        {
          "url": "https://git.kernel.org/stable/c/fc68f42aa737dc15e7665a4101d4168aadb8e4c4"
        }
      ],
      "title": "ACPI: fix NULL pointer dereference",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47289",
    "datePublished": "2024-05-21T14:35:14.740Z",
    "dateReserved": "2024-05-21T13:27:52.129Z",
    "dateUpdated": "2026-05-11T13:51:36.649Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-47341 (GCVE-0-2021-47341)

Vulnerability from cvelistv5 – Published: 2024-05-21 14:35 – Updated: 2026-08-05 08:47

Title

KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio

Summary

In the Linux kernel, the following vulnerability has been resolved: KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio BUG: KASAN: use-after-free in kvm_vm_ioctl_unregister_coalesced_mmio+0x7c/0x1ec arch/arm64/kvm/../../../virt/kvm/coalesced_mmio.c:183 Read of size 8 at addr ffff0000c03a2500 by task syz-executor083/4269 CPU: 5 PID: 4269 Comm: syz-executor083 Not tainted 5.10.0 #7 Hardware name: linux,dummy-virt (DT) Call trace: dump_backtrace+0x0/0x2d0 arch/arm64/kernel/stacktrace.c:132 show_stack+0x28/0x34 arch/arm64/kernel/stacktrace.c:196 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x110/0x164 lib/dump_stack.c:118 print_address_description+0x78/0x5c8 mm/kasan/report.c:385 __kasan_report mm/kasan/report.c:545 [inline] kasan_report+0x148/0x1e4 mm/kasan/report.c:562 check_memory_region_inline mm/kasan/generic.c:183 [inline] __asan_load8+0xb4/0xbc mm/kasan/generic.c:252 kvm_vm_ioctl_unregister_coalesced_mmio+0x7c/0x1ec arch/arm64/kvm/../../../virt/kvm/coalesced_mmio.c:183 kvm_vm_ioctl+0xe30/0x14c4 arch/arm64/kvm/../../../virt/kvm/kvm_main.c:3755 vfs_ioctl fs/ioctl.c:48 [inline] __do_sys_ioctl fs/ioctl.c:753 [inline] __se_sys_ioctl fs/ioctl.c:739 [inline] __arm64_sys_ioctl+0xf88/0x131c fs/ioctl.c:739 __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline] invoke_syscall arch/arm64/kernel/syscall.c:48 [inline] el0_svc_common arch/arm64/kernel/syscall.c:158 [inline] do_el0_svc+0x120/0x290 arch/arm64/kernel/syscall.c:220 el0_svc+0x1c/0x28 arch/arm64/kernel/entry-common.c:367 el0_sync_handler+0x98/0x170 arch/arm64/kernel/entry-common.c:383 el0_sync+0x140/0x180 arch/arm64/kernel/entry.S:670 Allocated by task 4269: stack_trace_save+0x80/0xb8 kernel/stacktrace.c:121 kasan_save_stack mm/kasan/common.c:48 [inline] kasan_set_track mm/kasan/common.c:56 [inline] __kasan_kmalloc+0xdc/0x120 mm/kasan/common.c:461 kasan_kmalloc+0xc/0x14 mm/kasan/common.c:475 kmem_cache_alloc_trace include/linux/slab.h:450 [inline] kmalloc include/linux/slab.h:552 [inline] kzalloc include/linux/slab.h:664 [inline] kvm_vm_ioctl_register_coalesced_mmio+0x78/0x1cc arch/arm64/kvm/../../../virt/kvm/coalesced_mmio.c:146 kvm_vm_ioctl+0x7e8/0x14c4 arch/arm64/kvm/../../../virt/kvm/kvm_main.c:3746 vfs_ioctl fs/ioctl.c:48 [inline] __do_sys_ioctl fs/ioctl.c:753 [inline] __se_sys_ioctl fs/ioctl.c:739 [inline] __arm64_sys_ioctl+0xf88/0x131c fs/ioctl.c:739 __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline] invoke_syscall arch/arm64/kernel/syscall.c:48 [inline] el0_svc_common arch/arm64/kernel/syscall.c:158 [inline] do_el0_svc+0x120/0x290 arch/arm64/kernel/syscall.c:220 el0_svc+0x1c/0x28 arch/arm64/kernel/entry-common.c:367 el0_sync_handler+0x98/0x170 arch/arm64/kernel/entry-common.c:383 el0_sync+0x140/0x180 arch/arm64/kernel/entry.S:670 Freed by task 4269: stack_trace_save+0x80/0xb8 kernel/stacktrace.c:121 kasan_save_stack mm/kasan/common.c:48 [inline] kasan_set_track+0x38/0x6c mm/kasan/common.c:56 kasan_set_free_info+0x20/0x40 mm/kasan/generic.c:355 __kasan_slab_free+0x124/0x150 mm/kasan/common.c:422 kasan_slab_free+0x10/0x1c mm/kasan/common.c:431 slab_free_hook mm/slub.c:1544 [inline] slab_free_freelist_hook mm/slub.c:1577 [inline] slab_free mm/slub.c:3142 [inline] kfree+0x104/0x38c mm/slub.c:4124 coalesced_mmio_destructor+0x94/0xa4 arch/arm64/kvm/../../../virt/kvm/coalesced_mmio.c:102 kvm_iodevice_destructor include/kvm/iodev.h:61 [inline] kvm_io_bus_unregister_dev+0x248/0x280 arch/arm64/kvm/../../../virt/kvm/kvm_main.c:4374 kvm_vm_ioctl_unregister_coalesced_mmio+0x158/0x1ec arch/arm64/kvm/../../../virt/kvm/coalesced_mmio.c:186 kvm_vm_ioctl+0xe30/0x14c4 arch/arm64/kvm/../../../virt/kvm/kvm_main.c:3755 vfs_ioctl fs/ioctl.c:48 [inline] __do_sys_ioctl fs/ioctl.c:753 [inline] __se_sys_ioctl fs/ioctl.c:739 [inline] __arm64_sys_ioctl+0xf88/0x131c fs/ioctl.c:739 __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline] invoke_syscall arch/arm64/kernel/sys ---truncated---

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 15:38 UTC

Assigner

Linux mitre root

References

5 references

URL	Tags
https://git.kernel.org/stable/c/f2ff9d03432fcb160…
https://git.kernel.org/stable/c/679837dc0abaa2c6e…
https://git.kernel.org/stable/c/8d7c539316d652d21…
https://git.kernel.org/stable/c/069d44a24c0ff8f85…
https://git.kernel.org/stable/c/23fa2e46a5556f787…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 7d1bc32d6477ff96a32695ea4be8144e4513ab2d , < f2ff9d03432fcb160e9f7d4be26174d89de2779a (git) Affected: 2a20592baff59c5351c5200ec667e1a2aa22af85 , < 679837dc0abaa2c6e2a7bcd86483e05eee1d5066 (git) Affected: 50cbad42bfea8c052b7ca590bd4126cdc898713c , < 8d7c539316d652d217e5e82b89ee204c812a7061 (git) Affected: 5d3c4c79384af06e3c8e25b7770b6247496b4417 , < 069d44a24c0ff8f85adf49233aae7a8ca16f5c7e (git) Affected: 5d3c4c79384af06e3c8e25b7770b6247496b4417 , < 23fa2e46a5556f787ce2ea1a315d3ab93cced204 (git) Affected: 168e82f640ed1891a700bdb43e37da354b2ab63c (git) Affected: 5.4.119 , < 5.4.134 (semver) Affected: 5.10.37 , < 5.10.52 (semver) Affected: 5.12.4 , < 5.12.19 (semver) Affected: 5.11.21 , < 5.12 (semver)
Linux	Linux	Affected: 5.13 Unaffected: 0 , < 5.13 (semver) Unaffected: 5.4.134 , ≤ 5.4.* (semver) Unaffected: 5.10.52 , ≤ 5.10.* (semver) Unaffected: 5.12.19 , ≤ 5.12.* (semver) Unaffected: 5.13.4 , ≤ 5.13.* (semver) Unaffected: 5.14 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:32:08.601Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f2ff9d03432fcb160e9f7d4be26174d89de2779a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/679837dc0abaa2c6e2a7bcd86483e05eee1d5066"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/8d7c539316d652d217e5e82b89ee204c812a7061"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/069d44a24c0ff8f85adf49233aae7a8ca16f5c7e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/23fa2e46a5556f787ce2ea1a315d3ab93cced204"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47341",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:38:50.302115Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:49.116Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "virt/kvm/coalesced_mmio.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f2ff9d03432fcb160e9f7d4be26174d89de2779a",
              "status": "affected",
              "version": "7d1bc32d6477ff96a32695ea4be8144e4513ab2d",
              "versionType": "git"
            },
            {
              "lessThan": "679837dc0abaa2c6e2a7bcd86483e05eee1d5066",
              "status": "affected",
              "version": "2a20592baff59c5351c5200ec667e1a2aa22af85",
              "versionType": "git"
            },
            {
              "lessThan": "8d7c539316d652d217e5e82b89ee204c812a7061",
              "status": "affected",
              "version": "50cbad42bfea8c052b7ca590bd4126cdc898713c",
              "versionType": "git"
            },
            {
              "lessThan": "069d44a24c0ff8f85adf49233aae7a8ca16f5c7e",
              "status": "affected",
              "version": "5d3c4c79384af06e3c8e25b7770b6247496b4417",
              "versionType": "git"
            },
            {
              "lessThan": "23fa2e46a5556f787ce2ea1a315d3ab93cced204",
              "status": "affected",
              "version": "5d3c4c79384af06e3c8e25b7770b6247496b4417",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "168e82f640ed1891a700bdb43e37da354b2ab63c",
              "versionType": "git"
            },
            {
              "lessThan": "5.4.134",
              "status": "affected",
              "version": "5.4.119",
              "versionType": "semver"
            },
            {
              "lessThan": "5.10.52",
              "status": "affected",
              "version": "5.10.37",
              "versionType": "semver"
            },
            {
              "lessThan": "5.12.19",
              "status": "affected",
              "version": "5.12.4",
              "versionType": "semver"
            },
            {
              "lessThan": "5.12",
              "status": "affected",
              "version": "5.11.21",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "virt/kvm/coalesced_mmio.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.13"
            },
            {
              "lessThan": "5.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.134",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.52",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.12.*",
              "status": "unaffected",
              "version": "5.12.19",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.13.*",
              "status": "unaffected",
              "version": "5.13.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.14",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.134",
                  "versionStartIncluding": "5.4.119",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.52",
                  "versionStartIncluding": "5.10.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.12.19",
                  "versionStartIncluding": "5.12.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.13.4",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.14",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.11.21",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio\n\nBUG: KASAN: use-after-free in kvm_vm_ioctl_unregister_coalesced_mmio+0x7c/0x1ec arch/arm64/kvm/../../../virt/kvm/coalesced_mmio.c:183\nRead of size 8 at addr ffff0000c03a2500 by task syz-executor083/4269\n\nCPU: 5 PID: 4269 Comm: syz-executor083 Not tainted 5.10.0 #7\nHardware name: linux,dummy-virt (DT)\nCall trace:\n dump_backtrace+0x0/0x2d0 arch/arm64/kernel/stacktrace.c:132\n show_stack+0x28/0x34 arch/arm64/kernel/stacktrace.c:196\n __dump_stack lib/dump_stack.c:77 [inline]\n dump_stack+0x110/0x164 lib/dump_stack.c:118\n print_address_description+0x78/0x5c8 mm/kasan/report.c:385\n __kasan_report mm/kasan/report.c:545 [inline]\n kasan_report+0x148/0x1e4 mm/kasan/report.c:562\n check_memory_region_inline mm/kasan/generic.c:183 [inline]\n __asan_load8+0xb4/0xbc mm/kasan/generic.c:252\n kvm_vm_ioctl_unregister_coalesced_mmio+0x7c/0x1ec arch/arm64/kvm/../../../virt/kvm/coalesced_mmio.c:183\n kvm_vm_ioctl+0xe30/0x14c4 arch/arm64/kvm/../../../virt/kvm/kvm_main.c:3755\n vfs_ioctl fs/ioctl.c:48 [inline]\n __do_sys_ioctl fs/ioctl.c:753 [inline]\n __se_sys_ioctl fs/ioctl.c:739 [inline]\n __arm64_sys_ioctl+0xf88/0x131c fs/ioctl.c:739\n __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline]\n invoke_syscall arch/arm64/kernel/syscall.c:48 [inline]\n el0_svc_common arch/arm64/kernel/syscall.c:158 [inline]\n do_el0_svc+0x120/0x290 arch/arm64/kernel/syscall.c:220\n el0_svc+0x1c/0x28 arch/arm64/kernel/entry-common.c:367\n el0_sync_handler+0x98/0x170 arch/arm64/kernel/entry-common.c:383\n el0_sync+0x140/0x180 arch/arm64/kernel/entry.S:670\n\nAllocated by task 4269:\n stack_trace_save+0x80/0xb8 kernel/stacktrace.c:121\n kasan_save_stack mm/kasan/common.c:48 [inline]\n kasan_set_track mm/kasan/common.c:56 [inline]\n __kasan_kmalloc+0xdc/0x120 mm/kasan/common.c:461\n kasan_kmalloc+0xc/0x14 mm/kasan/common.c:475\n kmem_cache_alloc_trace include/linux/slab.h:450 [inline]\n kmalloc include/linux/slab.h:552 [inline]\n kzalloc include/linux/slab.h:664 [inline]\n kvm_vm_ioctl_register_coalesced_mmio+0x78/0x1cc arch/arm64/kvm/../../../virt/kvm/coalesced_mmio.c:146\n kvm_vm_ioctl+0x7e8/0x14c4 arch/arm64/kvm/../../../virt/kvm/kvm_main.c:3746\n vfs_ioctl fs/ioctl.c:48 [inline]\n __do_sys_ioctl fs/ioctl.c:753 [inline]\n __se_sys_ioctl fs/ioctl.c:739 [inline]\n __arm64_sys_ioctl+0xf88/0x131c fs/ioctl.c:739\n __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline]\n invoke_syscall arch/arm64/kernel/syscall.c:48 [inline]\n el0_svc_common arch/arm64/kernel/syscall.c:158 [inline]\n do_el0_svc+0x120/0x290 arch/arm64/kernel/syscall.c:220\n el0_svc+0x1c/0x28 arch/arm64/kernel/entry-common.c:367\n el0_sync_handler+0x98/0x170 arch/arm64/kernel/entry-common.c:383\n el0_sync+0x140/0x180 arch/arm64/kernel/entry.S:670\n\nFreed by task 4269:\n stack_trace_save+0x80/0xb8 kernel/stacktrace.c:121\n kasan_save_stack mm/kasan/common.c:48 [inline]\n kasan_set_track+0x38/0x6c mm/kasan/common.c:56\n kasan_set_free_info+0x20/0x40 mm/kasan/generic.c:355\n __kasan_slab_free+0x124/0x150 mm/kasan/common.c:422\n kasan_slab_free+0x10/0x1c mm/kasan/common.c:431\n slab_free_hook mm/slub.c:1544 [inline]\n slab_free_freelist_hook mm/slub.c:1577 [inline]\n slab_free mm/slub.c:3142 [inline]\n kfree+0x104/0x38c mm/slub.c:4124\n coalesced_mmio_destructor+0x94/0xa4 arch/arm64/kvm/../../../virt/kvm/coalesced_mmio.c:102\n kvm_iodevice_destructor include/kvm/iodev.h:61 [inline]\n kvm_io_bus_unregister_dev+0x248/0x280 arch/arm64/kvm/../../../virt/kvm/kvm_main.c:4374\n kvm_vm_ioctl_unregister_coalesced_mmio+0x158/0x1ec arch/arm64/kvm/../../../virt/kvm/coalesced_mmio.c:186\n kvm_vm_ioctl+0xe30/0x14c4 arch/arm64/kvm/../../../virt/kvm/kvm_main.c:3755\n vfs_ioctl fs/ioctl.c:48 [inline]\n __do_sys_ioctl fs/ioctl.c:753 [inline]\n __se_sys_ioctl fs/ioctl.c:739 [inline]\n __arm64_sys_ioctl+0xf88/0x131c fs/ioctl.c:739\n __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline]\n invoke_syscall arch/arm64/kernel/sys\n---truncated---"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - Reachable only via local host ioctls on /dev/kvm (KVM_CREATE_VM then KVM_REGISTER/UNREGISTER_COALESCED_MMIO through kvm_vm_ioctl); not via network packets or unaided guest MMIO.\nAC:L - The attacker fully controls zone registration/unregistration and can reliably force the GFP_KERNEL_ACCOUNT kmalloc failure in kvm_io_bus_unregister_dev (e.g. memcg/memory pressure) that triggers the UAF path.\nPR:L - The ioctl path has no capable() check; access needs only /dev/kvm permissions (kvm group or seat uaccess), which is unprivileged device access rather than init-namespace root.\nUI:N - The attacker triggers the bug directly with their own KVM ioctls; no separate victim action is required.\nS:U - This is host userspace (VMM) corrupting host kernel state via the KVM ioctl interface, not a guest-to-host escape across a VM security boundary.\nC:H - KASAN-confirmed use-after-free of kvm_coalesced_mmio_dev heap objects; freed objects can be reallocated/sprayed to obtain arbitrary kernel memory disclosure.\nI:H - UAF/double-free of IO-bus device objects enables heap corruption and write primitives that can hijack kernel control flow.\nA:H - Dereferencing freed coalesced-MMIO list/device objects causes kernel oops/panic, and UAF paths remain crashable even without full exploitation."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:47:18.943Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f2ff9d03432fcb160e9f7d4be26174d89de2779a"
        },
        {
          "url": "https://git.kernel.org/stable/c/679837dc0abaa2c6e2a7bcd86483e05eee1d5066"
        },
        {
          "url": "https://git.kernel.org/stable/c/8d7c539316d652d217e5e82b89ee204c812a7061"
        },
        {
          "url": "https://git.kernel.org/stable/c/069d44a24c0ff8f85adf49233aae7a8ca16f5c7e"
        },
        {
          "url": "https://git.kernel.org/stable/c/23fa2e46a5556f787ce2ea1a315d3ab93cced204"
        }
      ],
      "title": "KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47341",
    "datePublished": "2024-05-21T14:35:49.001Z",
    "dateReserved": "2024-05-21T14:28:16.979Z",
    "dateUpdated": "2026-08-05T08:47:18.943Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-47373 (GCVE-0-2021-47373)

Vulnerability from cvelistv5 – Published: 2024-05-21 15:03 – Updated: 2026-05-11 13:53

Title

irqchip/gic-v3-its: Fix potential VPE leak on error

Summary

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Fix potential VPE leak on error In its_vpe_irq_domain_alloc, when its_vpe_init() returns an error, there is an off-by-one in the number of VPEs to be freed. Fix it by simply passing the number of VPEs allocated, which is the index of the loop iterating over the VPEs. [maz: fixed commit message]

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 15:38 UTC

Assigner

Linux mitre root

References

6 references

URL	Tags
https://git.kernel.org/stable/c/7d39992d45acd6f2d…
https://git.kernel.org/stable/c/5701e8bff314c155e…
https://git.kernel.org/stable/c/42d3711c23781045e…
https://git.kernel.org/stable/c/568662e37f927e3dc…
https://git.kernel.org/stable/c/e0c1c2e5da19685a2…
https://git.kernel.org/stable/c/280bef512933b2dda…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 7d75bbb4bc1ad90386776459d37e4ddfe605671e , < 7d39992d45acd6f2d6b2f62389c55b61fb3d486b (git) Affected: 7d75bbb4bc1ad90386776459d37e4ddfe605671e , < 5701e8bff314c155e7afdc467b1e0389d86853d0 (git) Affected: 7d75bbb4bc1ad90386776459d37e4ddfe605671e , < 42d3711c23781045e7a5cd28536c774b9a66d20b (git) Affected: 7d75bbb4bc1ad90386776459d37e4ddfe605671e , < 568662e37f927e3dc3e475f3ff7cf4ab7719c5e7 (git) Affected: 7d75bbb4bc1ad90386776459d37e4ddfe605671e , < e0c1c2e5da19685a20557a50f10c6aa4fa26aa84 (git) Affected: 7d75bbb4bc1ad90386776459d37e4ddfe605671e , < 280bef512933b2dda01d681d8cbe499b98fc5bdd (git)
Linux	Linux	Affected: 4.14 Unaffected: 0 , < 4.14 (semver) Unaffected: 4.14.249 , ≤ 4.14.* (semver) Unaffected: 4.19.209 , ≤ 4.19.* (semver) Unaffected: 5.4.150 , ≤ 5.4.* (semver) Unaffected: 5.10.70 , ≤ 5.10.* (semver) Unaffected: 5.14.9 , ≤ 5.14.* (semver) Unaffected: 5.15 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:32:08.615Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/7d39992d45acd6f2d6b2f62389c55b61fb3d486b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/5701e8bff314c155e7afdc467b1e0389d86853d0"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/42d3711c23781045e7a5cd28536c774b9a66d20b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/568662e37f927e3dc3e475f3ff7cf4ab7719c5e7"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e0c1c2e5da19685a20557a50f10c6aa4fa26aa84"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/280bef512933b2dda01d681d8cbe499b98fc5bdd"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47373",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:38:26.323793Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:45.779Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/irqchip/irq-gic-v3-its.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "7d39992d45acd6f2d6b2f62389c55b61fb3d486b",
              "status": "affected",
              "version": "7d75bbb4bc1ad90386776459d37e4ddfe605671e",
              "versionType": "git"
            },
            {
              "lessThan": "5701e8bff314c155e7afdc467b1e0389d86853d0",
              "status": "affected",
              "version": "7d75bbb4bc1ad90386776459d37e4ddfe605671e",
              "versionType": "git"
            },
            {
              "lessThan": "42d3711c23781045e7a5cd28536c774b9a66d20b",
              "status": "affected",
              "version": "7d75bbb4bc1ad90386776459d37e4ddfe605671e",
              "versionType": "git"
            },
            {
              "lessThan": "568662e37f927e3dc3e475f3ff7cf4ab7719c5e7",
              "status": "affected",
              "version": "7d75bbb4bc1ad90386776459d37e4ddfe605671e",
              "versionType": "git"
            },
            {
              "lessThan": "e0c1c2e5da19685a20557a50f10c6aa4fa26aa84",
              "status": "affected",
              "version": "7d75bbb4bc1ad90386776459d37e4ddfe605671e",
              "versionType": "git"
            },
            {
              "lessThan": "280bef512933b2dda01d681d8cbe499b98fc5bdd",
              "status": "affected",
              "version": "7d75bbb4bc1ad90386776459d37e4ddfe605671e",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/irqchip/irq-gic-v3-its.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.14"
            },
            {
              "lessThan": "4.14",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.249",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.150",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.70",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.14.*",
              "status": "unaffected",
              "version": "5.14.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.15",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.249",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.209",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.150",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.70",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.14.9",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gic-v3-its: Fix potential VPE leak on error\n\nIn its_vpe_irq_domain_alloc, when its_vpe_init() returns an error,\nthere is an off-by-one in the number of VPEs to be freed.\n\nFix it by simply passing the number of VPEs allocated, which is the\nindex of the loop iterating over the VPEs.\n\n[maz: fixed commit message]"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:53:27.247Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/7d39992d45acd6f2d6b2f62389c55b61fb3d486b"
        },
        {
          "url": "https://git.kernel.org/stable/c/5701e8bff314c155e7afdc467b1e0389d86853d0"
        },
        {
          "url": "https://git.kernel.org/stable/c/42d3711c23781045e7a5cd28536c774b9a66d20b"
        },
        {
          "url": "https://git.kernel.org/stable/c/568662e37f927e3dc3e475f3ff7cf4ab7719c5e7"
        },
        {
          "url": "https://git.kernel.org/stable/c/e0c1c2e5da19685a20557a50f10c6aa4fa26aa84"
        },
        {
          "url": "https://git.kernel.org/stable/c/280bef512933b2dda01d681d8cbe499b98fc5bdd"
        }
      ],
      "title": "irqchip/gic-v3-its: Fix potential VPE leak on error",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47373",
    "datePublished": "2024-05-21T15:03:37.789Z",
    "dateReserved": "2024-05-21T14:58:30.810Z",
    "dateUpdated": "2026-05-11T13:53:27.247Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-47425 (GCVE-0-2021-47425)

Vulnerability from cvelistv5 – Published: 2024-05-21 15:04 – Updated: 2026-05-11 13:54

Title

i2c: acpi: fix resource leak in reconfiguration device addition

Summary

In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpi_i2c_find_adapter_by_handle() calls bus_find_device() which takes a reference on the adapter which is never released which will result in a reference count leak and render the adapter unremovable. Make sure to put the adapter after creating the client in the same manner that we do for OF. [wsa: fixed title]

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-05-21 17:32 UTC

Assigner

Linux mitre root

References

6 references

URL	Tags
https://git.kernel.org/stable/c/b8090a84d7758b929…
https://git.kernel.org/stable/c/3d9d458a8aaafa472…
https://git.kernel.org/stable/c/60bacf259e8c2eb23…
https://git.kernel.org/stable/c/f86de018fd7a24ee0…
https://git.kernel.org/stable/c/90f1077c9184ec2ae…
https://git.kernel.org/stable/c/6558b646ce1c2a872…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 525e6fabeae286848592363bda13bc34b59bb5ac , < b8090a84d7758b929d348bafbd86bb7a10c5fb63 (git) Affected: 525e6fabeae286848592363bda13bc34b59bb5ac , < 3d9d458a8aaafa47268ea4f1b4114a9f12927989 (git) Affected: 525e6fabeae286848592363bda13bc34b59bb5ac , < 60bacf259e8c2eb2324f3e13275200baaee9494b (git) Affected: 525e6fabeae286848592363bda13bc34b59bb5ac , < f86de018fd7a24ee07372d55ffa7824f0c674a95 (git) Affected: 525e6fabeae286848592363bda13bc34b59bb5ac , < 90f1077c9184ec2ae9989e4642f211263f301694 (git) Affected: 525e6fabeae286848592363bda13bc34b59bb5ac , < 6558b646ce1c2a872fe1c2c7cb116f05a2c1950f (git)
Linux	Linux	Affected: 4.8 Unaffected: 0 , < 4.8 (semver) Unaffected: 4.14.251 , ≤ 4.14.* (semver) Unaffected: 4.19.211 , ≤ 4.19.* (semver) Unaffected: 5.4.153 , ≤ 5.4.* (semver) Unaffected: 5.10.73 , ≤ 5.10.* (semver) Unaffected: 5.14.12 , ≤ 5.14.* (semver) Unaffected: 5.15 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47425",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-21T17:32:39.731015Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:14:05.025Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:39:59.439Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b8090a84d7758b929d348bafbd86bb7a10c5fb63"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/3d9d458a8aaafa47268ea4f1b4114a9f12927989"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/60bacf259e8c2eb2324f3e13275200baaee9494b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f86de018fd7a24ee07372d55ffa7824f0c674a95"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/90f1077c9184ec2ae9989e4642f211263f301694"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/6558b646ce1c2a872fe1c2c7cb116f05a2c1950f"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/i2c/i2c-core-acpi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "b8090a84d7758b929d348bafbd86bb7a10c5fb63",
              "status": "affected",
              "version": "525e6fabeae286848592363bda13bc34b59bb5ac",
              "versionType": "git"
            },
            {
              "lessThan": "3d9d458a8aaafa47268ea4f1b4114a9f12927989",
              "status": "affected",
              "version": "525e6fabeae286848592363bda13bc34b59bb5ac",
              "versionType": "git"
            },
            {
              "lessThan": "60bacf259e8c2eb2324f3e13275200baaee9494b",
              "status": "affected",
              "version": "525e6fabeae286848592363bda13bc34b59bb5ac",
              "versionType": "git"
            },
            {
              "lessThan": "f86de018fd7a24ee07372d55ffa7824f0c674a95",
              "status": "affected",
              "version": "525e6fabeae286848592363bda13bc34b59bb5ac",
              "versionType": "git"
            },
            {
              "lessThan": "90f1077c9184ec2ae9989e4642f211263f301694",
              "status": "affected",
              "version": "525e6fabeae286848592363bda13bc34b59bb5ac",
              "versionType": "git"
            },
            {
              "lessThan": "6558b646ce1c2a872fe1c2c7cb116f05a2c1950f",
              "status": "affected",
              "version": "525e6fabeae286848592363bda13bc34b59bb5ac",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/i2c/i2c-core-acpi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.8"
            },
            {
              "lessThan": "4.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.251",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.211",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.153",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.73",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.14.*",
              "status": "unaffected",
              "version": "5.14.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.15",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.251",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.211",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.153",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.73",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.14.12",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: acpi: fix resource leak in reconfiguration device addition\n\nacpi_i2c_find_adapter_by_handle() calls bus_find_device() which takes a\nreference on the adapter which is never released which will result in a\nreference count leak and render the adapter unremovable.  Make sure to\nput the adapter after creating the client in the same manner that we do\nfor OF.\n\n[wsa: fixed title]"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:54:27.252Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/b8090a84d7758b929d348bafbd86bb7a10c5fb63"
        },
        {
          "url": "https://git.kernel.org/stable/c/3d9d458a8aaafa47268ea4f1b4114a9f12927989"
        },
        {
          "url": "https://git.kernel.org/stable/c/60bacf259e8c2eb2324f3e13275200baaee9494b"
        },
        {
          "url": "https://git.kernel.org/stable/c/f86de018fd7a24ee07372d55ffa7824f0c674a95"
        },
        {
          "url": "https://git.kernel.org/stable/c/90f1077c9184ec2ae9989e4642f211263f301694"
        },
        {
          "url": "https://git.kernel.org/stable/c/6558b646ce1c2a872fe1c2c7cb116f05a2c1950f"
        }
      ],
      "title": "i2c: acpi: fix resource leak in reconfiguration device addition",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47425",
    "datePublished": "2024-05-21T15:04:11.931Z",
    "dateReserved": "2024-05-21T14:58:30.827Z",
    "dateUpdated": "2026-05-11T13:54:27.252Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-47549 (GCVE-0-2021-47549)

Vulnerability from cvelistv5 – Published: 2024-05-24 15:09 – Updated: 2026-05-11 13:56

Title

sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl

Summary

In the Linux kernel, the following vulnerability has been resolved: sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl When the `rmmod sata_fsl.ko` command is executed in the PPC64 GNU/Linux, a bug is reported: ================================================================== BUG: Unable to handle kernel data access on read at 0x80000800805b502c Oops: Kernel access of bad area, sig: 11 [#1] NIP [c0000000000388a4] .ioread32+0x4/0x20 LR [80000000000c6034] .sata_fsl_port_stop+0x44/0xe0 [sata_fsl] Call Trace: .free_irq+0x1c/0x4e0 (unreliable) .ata_host_stop+0x74/0xd0 [libata] .release_nodes+0x330/0x3f0 .device_release_driver_internal+0x178/0x2c0 .driver_detach+0x64/0xd0 .bus_remove_driver+0x70/0xf0 .driver_unregister+0x38/0x80 .platform_driver_unregister+0x14/0x30 .fsl_sata_driver_exit+0x18/0xa20 [sata_fsl] .__se_sys_delete_module+0x1ec/0x2d0 .system_call_exception+0xfc/0x1f0 system_call_common+0xf8/0x200 ================================================================== The triggering of the BUG is shown in the following stack: driver_detach device_release_driver_internal __device_release_driver drv->remove(dev) --> platform_drv_remove/platform_remove drv->remove(dev) --> sata_fsl_remove iounmap(host_priv->hcr_base); <---- unmap kfree(host_priv); <---- free devres_release_all release_nodes dr->node.release(dev, dr->data) --> ata_host_stop ap->ops->port_stop(ap) --> sata_fsl_port_stop ioread32(hcr_base + HCONTROL) <---- UAF host->ops->host_stop(host) The iounmap(host_priv->hcr_base) and kfree(host_priv) functions should not be executed in drv->remove. These functions should be executed in host_stop after port_stop. Therefore, we move these functions to the new function sata_fsl_host_stop and bind the new function to host_stop.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-06-10 18:51 UTC

Assigner

Linux mitre root

References

8 references

URL	Tags
https://git.kernel.org/stable/c/cdcd80292106df5cd…
https://git.kernel.org/stable/c/91ba94d3f7afca195…
https://git.kernel.org/stable/c/325ea49fc43cbc03a…
https://git.kernel.org/stable/c/0769449b0a5eabc35…
https://git.kernel.org/stable/c/77393806c76b6b44f…
https://git.kernel.org/stable/c/4a46b2f5dce02539e…
https://git.kernel.org/stable/c/adf098e2a8a1e1fc0…
https://git.kernel.org/stable/c/6c8ad7e8cf29eb558…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: faf0b2e5afe7dae072d2715763c7f992b612b628 , < cdcd80292106df5cda325426e96495503e41f947 (git) Affected: faf0b2e5afe7dae072d2715763c7f992b612b628 , < 91ba94d3f7afca195b224f77a72044fbde1389ce (git) Affected: faf0b2e5afe7dae072d2715763c7f992b612b628 , < 325ea49fc43cbc03a5e1e37de8f0ca6357ced4b1 (git) Affected: faf0b2e5afe7dae072d2715763c7f992b612b628 , < 0769449b0a5eabc3545337217ae690e46673e73a (git) Affected: faf0b2e5afe7dae072d2715763c7f992b612b628 , < 77393806c76b6b44f1c44bd957788c8bd9152c45 (git) Affected: faf0b2e5afe7dae072d2715763c7f992b612b628 , < 4a46b2f5dce02539e88a300800812bd24a45e097 (git) Affected: faf0b2e5afe7dae072d2715763c7f992b612b628 , < adf098e2a8a1e1fc075d6a5ba2edd13cf7189082 (git) Affected: faf0b2e5afe7dae072d2715763c7f992b612b628 , < 6c8ad7e8cf29eb55836e7a0215f967746ab2b504 (git)
Linux	Linux	Affected: 2.6.24 Unaffected: 0 , < 2.6.24 (semver) Unaffected: 4.4.294 , ≤ 4.4.* (semver) Unaffected: 4.9.292 , ≤ 4.9.* (semver) Unaffected: 4.14.257 , ≤ 4.14.* (semver) Unaffected: 4.19.220 , ≤ 4.19.* (semver) Unaffected: 5.4.164 , ≤ 5.4.* (semver) Unaffected: 5.10.84 , ≤ 5.10.* (semver) Unaffected: 5.15.7 , ≤ 5.15.* (semver) Unaffected: 5.16 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47549",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-10T18:51:57.611443Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-10T18:52:23.946Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:39:59.798Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/cdcd80292106df5cda325426e96495503e41f947"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/91ba94d3f7afca195b224f77a72044fbde1389ce"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/325ea49fc43cbc03a5e1e37de8f0ca6357ced4b1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/0769449b0a5eabc3545337217ae690e46673e73a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/77393806c76b6b44f1c44bd957788c8bd9152c45"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/4a46b2f5dce02539e88a300800812bd24a45e097"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/adf098e2a8a1e1fc075d6a5ba2edd13cf7189082"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/6c8ad7e8cf29eb55836e7a0215f967746ab2b504"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/ata/sata_fsl.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "cdcd80292106df5cda325426e96495503e41f947",
              "status": "affected",
              "version": "faf0b2e5afe7dae072d2715763c7f992b612b628",
              "versionType": "git"
            },
            {
              "lessThan": "91ba94d3f7afca195b224f77a72044fbde1389ce",
              "status": "affected",
              "version": "faf0b2e5afe7dae072d2715763c7f992b612b628",
              "versionType": "git"
            },
            {
              "lessThan": "325ea49fc43cbc03a5e1e37de8f0ca6357ced4b1",
              "status": "affected",
              "version": "faf0b2e5afe7dae072d2715763c7f992b612b628",
              "versionType": "git"
            },
            {
              "lessThan": "0769449b0a5eabc3545337217ae690e46673e73a",
              "status": "affected",
              "version": "faf0b2e5afe7dae072d2715763c7f992b612b628",
              "versionType": "git"
            },
            {
              "lessThan": "77393806c76b6b44f1c44bd957788c8bd9152c45",
              "status": "affected",
              "version": "faf0b2e5afe7dae072d2715763c7f992b612b628",
              "versionType": "git"
            },
            {
              "lessThan": "4a46b2f5dce02539e88a300800812bd24a45e097",
              "status": "affected",
              "version": "faf0b2e5afe7dae072d2715763c7f992b612b628",
              "versionType": "git"
            },
            {
              "lessThan": "adf098e2a8a1e1fc075d6a5ba2edd13cf7189082",
              "status": "affected",
              "version": "faf0b2e5afe7dae072d2715763c7f992b612b628",
              "versionType": "git"
            },
            {
              "lessThan": "6c8ad7e8cf29eb55836e7a0215f967746ab2b504",
              "status": "affected",
              "version": "faf0b2e5afe7dae072d2715763c7f992b612b628",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/ata/sata_fsl.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.24"
            },
            {
              "lessThan": "2.6.24",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.4.*",
              "status": "unaffected",
              "version": "4.4.294",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.292",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.257",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.220",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.164",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.84",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.16",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.4.294",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.292",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.257",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.220",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.164",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.84",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.7",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.16",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl\n\nWhen the `rmmod sata_fsl.ko` command is executed in the PPC64 GNU/Linux,\na bug is reported:\n ==================================================================\n BUG: Unable to handle kernel data access on read at 0x80000800805b502c\n Oops: Kernel access of bad area, sig: 11 [#1]\n NIP [c0000000000388a4] .ioread32+0x4/0x20\n LR [80000000000c6034] .sata_fsl_port_stop+0x44/0xe0 [sata_fsl]\n Call Trace:\n  .free_irq+0x1c/0x4e0 (unreliable)\n  .ata_host_stop+0x74/0xd0 [libata]\n  .release_nodes+0x330/0x3f0\n  .device_release_driver_internal+0x178/0x2c0\n  .driver_detach+0x64/0xd0\n  .bus_remove_driver+0x70/0xf0\n  .driver_unregister+0x38/0x80\n  .platform_driver_unregister+0x14/0x30\n  .fsl_sata_driver_exit+0x18/0xa20 [sata_fsl]\n  .__se_sys_delete_module+0x1ec/0x2d0\n  .system_call_exception+0xfc/0x1f0\n  system_call_common+0xf8/0x200\n ==================================================================\n\nThe triggering of the BUG is shown in the following stack:\n\ndriver_detach\n  device_release_driver_internal\n    __device_release_driver\n      drv-\u003eremove(dev) --\u003e platform_drv_remove/platform_remove\n        drv-\u003eremove(dev) --\u003e sata_fsl_remove\n          iounmap(host_priv-\u003ehcr_base);\t\t\t\u003c---- unmap\n          kfree(host_priv);                             \u003c---- free\n      devres_release_all\n        release_nodes\n          dr-\u003enode.release(dev, dr-\u003edata) --\u003e ata_host_stop\n            ap-\u003eops-\u003eport_stop(ap) --\u003e sata_fsl_port_stop\n                ioread32(hcr_base + HCONTROL)           \u003c---- UAF\n            host-\u003eops-\u003ehost_stop(host)\n\nThe iounmap(host_priv-\u003ehcr_base) and kfree(host_priv) functions should\nnot be executed in drv-\u003eremove. These functions should be executed in\nhost_stop after port_stop. Therefore, we move these functions to the\nnew function sata_fsl_host_stop and bind the new function to host_stop."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:56:46.684Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/cdcd80292106df5cda325426e96495503e41f947"
        },
        {
          "url": "https://git.kernel.org/stable/c/91ba94d3f7afca195b224f77a72044fbde1389ce"
        },
        {
          "url": "https://git.kernel.org/stable/c/325ea49fc43cbc03a5e1e37de8f0ca6357ced4b1"
        },
        {
          "url": "https://git.kernel.org/stable/c/0769449b0a5eabc3545337217ae690e46673e73a"
        },
        {
          "url": "https://git.kernel.org/stable/c/77393806c76b6b44f1c44bd957788c8bd9152c45"
        },
        {
          "url": "https://git.kernel.org/stable/c/4a46b2f5dce02539e88a300800812bd24a45e097"
        },
        {
          "url": "https://git.kernel.org/stable/c/adf098e2a8a1e1fc075d6a5ba2edd13cf7189082"
        },
        {
          "url": "https://git.kernel.org/stable/c/6c8ad7e8cf29eb55836e7a0215f967746ab2b504"
        }
      ],
      "title": "sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47549",
    "datePublished": "2024-05-24T15:09:53.292Z",
    "dateReserved": "2024-05-24T15:02:54.831Z",
    "dateUpdated": "2026-05-11T13:56:46.684Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-48751 (GCVE-0-2022-48751)

Vulnerability from cvelistv5 – Published: 2024-06-20 11:13 – Updated: 2026-08-05 08:52

Title

net/smc: Transitional solution for clcsock race issue

Summary

In the Linux kernel, the following vulnerability has been resolved: net/smc: Transitional solution for clcsock race issue We encountered a crash in smc_setsockopt() and it is caused by accessing smc->clcsock after clcsock was released. BUG: kernel NULL pointer dereference, address: 0000000000000020 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 1 PID: 50309 Comm: nginx Kdump: loaded Tainted: G E 5.16.0-rc4+ #53 RIP: 0010:smc_setsockopt+0x59/0x280 [smc] Call Trace: <TASK> __sys_setsockopt+0xfc/0x190 __x64_sys_setsockopt+0x20/0x30 do_syscall_64+0x34/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f16ba83918e </TASK> This patch tries to fix it by holding clcsock_release_lock and checking whether clcsock has already been released before access. In case that a crash of the same reason happens in smc_getsockopt() or smc_switch_to_fallback(), this patch also checkes smc->clcsock in them too. And the caller of smc_switch_to_fallback() will identify whether fallback succeeds according to the return value.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 17:10 UTC

Assigner

Linux mitre root

References

3 references

URL	Tags
https://git.kernel.org/stable/c/38f0bdd548fd2ef5d…
https://git.kernel.org/stable/c/4284225cd8001e134…
https://git.kernel.org/stable/c/c0bf3d8a943b6f2e9…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: fd57770dd198f5b2ddd5b9e6bf282cf98d63adb9 , < 38f0bdd548fd2ef5d481b88d8a2bfef968452e34 (git) Affected: fd57770dd198f5b2ddd5b9e6bf282cf98d63adb9 , < 4284225cd8001e134f5cf533a7cd244bbb654d0f (git) Affected: fd57770dd198f5b2ddd5b9e6bf282cf98d63adb9 , < c0bf3d8a943b6f2e912b7c1de03e2ef28e76f760 (git) Affected: d1d004585b40c212b338fc8a40cbaaf230ea4703 (git) Affected: 4.19.299 , < 4.20 (semver)
Linux	Linux	Affected: 5.1 Unaffected: 0 , < 5.1 (semver) Unaffected: 5.15.19 , ≤ 5.15.* (semver) Unaffected: 5.16.5 , ≤ 5.16.* (semver) Unaffected: 5.17 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:25:00.333Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/38f0bdd548fd2ef5d481b88d8a2bfef968452e34"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/4284225cd8001e134f5cf533a7cd244bbb654d0f"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c0bf3d8a943b6f2e912b7c1de03e2ef28e76f760"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-48751",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T17:10:28.867754Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:34:47.967Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/smc/af_smc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "38f0bdd548fd2ef5d481b88d8a2bfef968452e34",
              "status": "affected",
              "version": "fd57770dd198f5b2ddd5b9e6bf282cf98d63adb9",
              "versionType": "git"
            },
            {
              "lessThan": "4284225cd8001e134f5cf533a7cd244bbb654d0f",
              "status": "affected",
              "version": "fd57770dd198f5b2ddd5b9e6bf282cf98d63adb9",
              "versionType": "git"
            },
            {
              "lessThan": "c0bf3d8a943b6f2e912b7c1de03e2ef28e76f760",
              "status": "affected",
              "version": "fd57770dd198f5b2ddd5b9e6bf282cf98d63adb9",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "d1d004585b40c212b338fc8a40cbaaf230ea4703",
              "versionType": "git"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.299",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/smc/af_smc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.1"
            },
            {
              "lessThan": "5.1",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.19",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.16.*",
              "status": "unaffected",
              "version": "5.16.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.17",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.19",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.16.5",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.17",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.299",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: Transitional solution for clcsock race issue\n\nWe encountered a crash in smc_setsockopt() and it is caused by\naccessing smc-\u003eclcsock after clcsock was released.\n\n BUG: kernel NULL pointer dereference, address: 0000000000000020\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n PGD 0 P4D 0\n Oops: 0000 [#1] PREEMPT SMP PTI\n CPU: 1 PID: 50309 Comm: nginx Kdump: loaded Tainted: G E     5.16.0-rc4+ #53\n RIP: 0010:smc_setsockopt+0x59/0x280 [smc]\n Call Trace:\n  \u003cTASK\u003e\n  __sys_setsockopt+0xfc/0x190\n  __x64_sys_setsockopt+0x20/0x30\n  do_syscall_64+0x34/0x90\n  entry_SYSCALL_64_after_hwframe+0x44/0xae\n RIP: 0033:0x7f16ba83918e\n  \u003c/TASK\u003e\n\nThis patch tries to fix it by holding clcsock_release_lock and\nchecking whether clcsock has already been released before access.\n\nIn case that a crash of the same reason happens in smc_getsockopt()\nor smc_switch_to_fallback(), this patch also checkes smc-\u003eclcsock\nin them too. And the caller of smc_switch_to_fallback() will identify\nwhether fallback succeeds according to the return value."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is reached via local socket syscalls (setsockopt/getsockopt/fallback) on an AF_SMC socket; a remote peer alone cannot invoke the vulnerable paths without local process participation.\nAC:L - The attacker controls both sides of the race by concurrently calling setsockopt/getsockopt and close (or otherwise triggering smc_clcsock_release) on a shared AF_SMC fd, so success does not depend on conditions outside attacker influence.\nPR:L - Creating and operating AF_SMC sockets requires only an unprivileged local account; smc_create has no capability check, and user namespaces are not required.\nUI:N - Exploitation uses only the attacker\u0027s own syscalls on sockets they create; no separate victim action is required.\nS:U - Impact is confined to the local kernel\u0027s SMC/socket authority; this is standard kernel memory-safety damage, not a cross-boundary escape.\nC:H - The unlocked clcsock access races with smc_clcsock_release()\u0027s sock_release, yielding a use-after-free on the TCP CLC socket object that can be reclaimed and read through.\nI:H - The same UAF is exercised by smc_switch_to_fallback(), which writes clcsock fields and splices wait-queues through the freed pointer, enabling heap corruption and control-flow hijacking primitives.\nA:H - The race reliably produces kernel NULL pointer dereference or UAF oops/panic (as in the reported smc_setsockopt crash), causing full availability loss."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:52:07.796Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/38f0bdd548fd2ef5d481b88d8a2bfef968452e34"
        },
        {
          "url": "https://git.kernel.org/stable/c/4284225cd8001e134f5cf533a7cd244bbb654d0f"
        },
        {
          "url": "https://git.kernel.org/stable/c/c0bf3d8a943b6f2e912b7c1de03e2ef28e76f760"
        }
      ],
      "title": "net/smc: Transitional solution for clcsock race issue",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-48751",
    "datePublished": "2024-06-20T11:13:32.575Z",
    "dateReserved": "2024-06-20T11:09:39.057Z",
    "dateUpdated": "2026-08-05T08:52:07.796Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-48769 (GCVE-0-2022-48769)

Vulnerability from cvelistv5 – Published: 2024-06-20 11:13 – Updated: 2026-05-23 15:20

Title

efi: runtime: avoid EFIv2 runtime services on Apple x86 machines

Summary

In the Linux kernel, the following vulnerability has been resolved: efi: runtime: avoid EFIv2 runtime services on Apple x86 machines Aditya reports [0] that his recent MacbookPro crashes in the firmware when using the variable services at runtime. The culprit appears to be a call to QueryVariableInfo(), which we did not use to call on Apple x86 machines in the past as they only upgraded from EFI v1.10 to EFI v2.40 firmware fairly recently, and QueryVariableInfo() (along with UpdateCapsule() et al) was added in EFI v2.00. The only runtime service introduced in EFI v2.00 that we actually use in Linux is QueryVariableInfo(), as the capsule based ones are optional, generally not used at runtime (all the LVFS/fwupd firmware update infrastructure uses helper EFI programs that invoke capsule update at boot time, not runtime), and not implemented by Apple machines in the first place. QueryVariableInfo() is used to 'safely' set variables, i.e., only when there is enough space. This prevents machines with buggy firmwares from corrupting their NVRAMs when they run out of space. Given that Apple machines have been using EFI v1.10 services only for the longest time (the EFI v2.0 spec was released in 2006, and Linux support for the newly introduced runtime services was added in 2011, but the MacbookPro12,1 released in 2015 still claims to be EFI v1.10 only), let's avoid the EFI v2.0 ones on all Apple x86 machines. [0] https://lore.kernel.org/all/6D757C75-65B1-468B-842D-10410081A8E4@live.com/

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 17:10 UTC

Assigner

Linux mitre root

References

4 references

URL	Tags
https://git.kernel.org/stable/c/b0f1cc093bc2493ac…
https://git.kernel.org/stable/c/3df52448978802ae1…
https://git.kernel.org/stable/c/a4085859411c825c3…
https://git.kernel.org/stable/c/f5390cd0b43c2e54c…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: d6cf86d8f23253225fe2a763d627ecf7dfee9dae , < b0f1cc093bc2493ac259c53766fd2b800e085807 (git) Affected: d6cf86d8f23253225fe2a763d627ecf7dfee9dae , < 3df52448978802ae15dcebf66beba1029df957b4 (git) Affected: d6cf86d8f23253225fe2a763d627ecf7dfee9dae , < a4085859411c825c321c9b55b8a9dc5a128a6684 (git) Affected: d6cf86d8f23253225fe2a763d627ecf7dfee9dae , < f5390cd0b43c2e54c7cf5506c7da4a37c5cef746 (git) Affected: 13fcf5d1c5fe491aeb0b0f34a46d88134432edb1 (git) Affected: 0c9673834740afdfa7c172b1b19c6b3ec5bc3907 (git) Affected: 8e221a3c057d674e3c1cc4d1d8fe65ac4697104b (git) Affected: b3ab8b31e8b3c1ff4971bd52d0c8ebde5cfbdb97 (git) Affected: 3.2.32 , < 3.3 (semver) Affected: 3.4.14 , < 3.5 (semver) Affected: 3.5.7 , < 3.6 (semver) Affected: 3.6.2 , < 3.7 (semver)
Linux	Linux	Affected: 3.7 Unaffected: 0 , < 3.7 (semver) Unaffected: 5.10.96 , ≤ 5.10.* (semver) Unaffected: 5.15.19 , ≤ 5.15.* (semver) Unaffected: 5.16.5 , ≤ 5.16.* (semver) Unaffected: 5.17 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:25:01.538Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b0f1cc093bc2493ac259c53766fd2b800e085807"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/3df52448978802ae15dcebf66beba1029df957b4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/a4085859411c825c321c9b55b8a9dc5a128a6684"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f5390cd0b43c2e54c7cf5506c7da4a37c5cef746"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-48769",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T17:10:03.596823Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:34:46.991Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/firmware/efi/efi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "b0f1cc093bc2493ac259c53766fd2b800e085807",
              "status": "affected",
              "version": "d6cf86d8f23253225fe2a763d627ecf7dfee9dae",
              "versionType": "git"
            },
            {
              "lessThan": "3df52448978802ae15dcebf66beba1029df957b4",
              "status": "affected",
              "version": "d6cf86d8f23253225fe2a763d627ecf7dfee9dae",
              "versionType": "git"
            },
            {
              "lessThan": "a4085859411c825c321c9b55b8a9dc5a128a6684",
              "status": "affected",
              "version": "d6cf86d8f23253225fe2a763d627ecf7dfee9dae",
              "versionType": "git"
            },
            {
              "lessThan": "f5390cd0b43c2e54c7cf5506c7da4a37c5cef746",
              "status": "affected",
              "version": "d6cf86d8f23253225fe2a763d627ecf7dfee9dae",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "13fcf5d1c5fe491aeb0b0f34a46d88134432edb1",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "0c9673834740afdfa7c172b1b19c6b3ec5bc3907",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8e221a3c057d674e3c1cc4d1d8fe65ac4697104b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b3ab8b31e8b3c1ff4971bd52d0c8ebde5cfbdb97",
              "versionType": "git"
            },
            {
              "lessThan": "3.3",
              "status": "affected",
              "version": "3.2.32",
              "versionType": "semver"
            },
            {
              "lessThan": "3.5",
              "status": "affected",
              "version": "3.4.14",
              "versionType": "semver"
            },
            {
              "lessThan": "3.6",
              "status": "affected",
              "version": "3.5.7",
              "versionType": "semver"
            },
            {
              "lessThan": "3.7",
              "status": "affected",
              "version": "3.6.2",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/firmware/efi/efi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.7"
            },
            {
              "lessThan": "3.7",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.96",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.19",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.16.*",
              "status": "unaffected",
              "version": "5.16.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.17",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.96",
                  "versionStartIncluding": "3.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.19",
                  "versionStartIncluding": "3.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.16.5",
                  "versionStartIncluding": "3.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.17",
                  "versionStartIncluding": "3.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.2.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.6.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi: runtime: avoid EFIv2 runtime services on Apple x86 machines\n\nAditya reports [0] that his recent MacbookPro crashes in the firmware\nwhen using the variable services at runtime. The culprit appears to be a\ncall to QueryVariableInfo(), which we did not use to call on Apple x86\nmachines in the past as they only upgraded from EFI v1.10 to EFI v2.40\nfirmware fairly recently, and QueryVariableInfo() (along with\nUpdateCapsule() et al) was added in EFI v2.00.\n\nThe only runtime service introduced in EFI v2.00 that we actually use in\nLinux is QueryVariableInfo(), as the capsule based ones are optional,\ngenerally not used at runtime (all the LVFS/fwupd firmware update\ninfrastructure uses helper EFI programs that invoke capsule update at\nboot time, not runtime), and not implemented by Apple machines in the\nfirst place. QueryVariableInfo() is used to \u0027safely\u0027 set variables,\ni.e., only when there is enough space. This prevents machines with buggy\nfirmwares from corrupting their NVRAMs when they run out of space.\n\nGiven that Apple machines have been using EFI v1.10 services only for\nthe longest time (the EFI v2.0 spec was released in 2006, and Linux\nsupport for the newly introduced runtime services was added in 2011, but\nthe MacbookPro12,1 released in 2015 still claims to be EFI v1.10 only),\nlet\u0027s avoid the EFI v2.0 ones on all Apple x86 machines.\n\n[0] https://lore.kernel.org/all/6D757C75-65B1-468B-842D-10410081A8E4@live.com/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:20:39.718Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/b0f1cc093bc2493ac259c53766fd2b800e085807"
        },
        {
          "url": "https://git.kernel.org/stable/c/3df52448978802ae15dcebf66beba1029df957b4"
        },
        {
          "url": "https://git.kernel.org/stable/c/a4085859411c825c321c9b55b8a9dc5a128a6684"
        },
        {
          "url": "https://git.kernel.org/stable/c/f5390cd0b43c2e54c7cf5506c7da4a37c5cef746"
        }
      ],
      "title": "efi: runtime: avoid EFIv2 runtime services on Apple x86 machines",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-48769",
    "datePublished": "2024-06-20T11:13:44.469Z",
    "dateReserved": "2024-06-20T11:09:39.061Z",
    "dateUpdated": "2026-05-23T15:20:39.718Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-48786 (GCVE-0-2022-48786)

Vulnerability from cvelistv5 – Published: 2024-07-16 11:43 – Updated: 2026-08-05 08:52

Title

vsock: remove vsock from connected table when connect is interrupted by a signal

Summary

In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by a signal vsock_connect() expects that the socket could already be in the TCP_ESTABLISHED state when the connecting task wakes up with a signal pending. If this happens the socket will be in the connected table, and it is not removed when the socket state is reset. In this situation it's common for the process to retry connect(), and if the connection is successful the socket will be added to the connected table a second time, corrupting the list. Prevent this by calling vsock_remove_connected() if a signal is received while waiting for a connection. This is harmless if the socket is not in the connected table, and if it is in the table then removing it will prevent list corruption from a double add. Note for backporting: this patch requires d5afa82c977e ("vsock: correct removal of socket from the list"), which is in all current stable trees except 4.9.y.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 16:59 UTC

Assigner

Linux mitre root

References

8 references

URL	Tags
https://git.kernel.org/stable/c/0bb88f3f7e8d506f3…
https://git.kernel.org/stable/c/e3b3939fd137aab6d…
https://git.kernel.org/stable/c/2910bcb9f67551a45…
https://git.kernel.org/stable/c/5f326fe2aef411a65…
https://git.kernel.org/stable/c/87cd1bbd6677411e1…
https://git.kernel.org/stable/c/787468ee7a4357775…
https://git.kernel.org/stable/c/addd62a8cb6fa90aa…
https://git.kernel.org/stable/c/b9208492fcaecff8f…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: d021c344051af91f42c5ba9fdedc176740cbd238 , < 0bb88f3f7e8d506f3efe46d694964117e20efbfc (git) Affected: d021c344051af91f42c5ba9fdedc176740cbd238 , < e3b3939fd137aab6d00d54bee0ee9244b286a608 (git) Affected: d021c344051af91f42c5ba9fdedc176740cbd238 , < 2910bcb9f67551a45397735e47b6d456eb8cd549 (git) Affected: d021c344051af91f42c5ba9fdedc176740cbd238 , < 5f326fe2aef411a6575628f92bd861463ea91df7 (git) Affected: d021c344051af91f42c5ba9fdedc176740cbd238 , < 87cd1bbd6677411e17369cd4b7389ab1e1fdba44 (git) Affected: d021c344051af91f42c5ba9fdedc176740cbd238 , < 787468ee7a435777521d33399d012fd591ae2f94 (git) Affected: d021c344051af91f42c5ba9fdedc176740cbd238 , < addd62a8cb6fa90aa322365c62487da61f6baab8 (git) Affected: d021c344051af91f42c5ba9fdedc176740cbd238 , < b9208492fcaecff8f43915529ae34b3bcb03877c (git)
Linux	Linux	Affected: 3.9 Unaffected: 0 , < 3.9 (semver) Unaffected: 4.9.303 , ≤ 4.9.* (semver) Unaffected: 4.14.268 , ≤ 4.14.* (semver) Unaffected: 4.19.231 , ≤ 4.19.* (semver) Unaffected: 5.4.181 , ≤ 5.4.* (semver) Unaffected: 5.10.102 , ≤ 5.10.* (semver) Unaffected: 5.15.25 , ≤ 5.15.* (semver) Unaffected: 5.16.11 , ≤ 5.16.* (semver) Unaffected: 5.17 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:25:01.588Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/0bb88f3f7e8d506f3efe46d694964117e20efbfc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e3b3939fd137aab6d00d54bee0ee9244b286a608"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/2910bcb9f67551a45397735e47b6d456eb8cd549"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/5f326fe2aef411a6575628f92bd861463ea91df7"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/87cd1bbd6677411e17369cd4b7389ab1e1fdba44"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/787468ee7a435777521d33399d012fd591ae2f94"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/addd62a8cb6fa90aa322365c62487da61f6baab8"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b9208492fcaecff8f43915529ae34b3bcb03877c"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-48786",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:59:52.125930Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:34:16.278Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/vmw_vsock/af_vsock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "0bb88f3f7e8d506f3efe46d694964117e20efbfc",
              "status": "affected",
              "version": "d021c344051af91f42c5ba9fdedc176740cbd238",
              "versionType": "git"
            },
            {
              "lessThan": "e3b3939fd137aab6d00d54bee0ee9244b286a608",
              "status": "affected",
              "version": "d021c344051af91f42c5ba9fdedc176740cbd238",
              "versionType": "git"
            },
            {
              "lessThan": "2910bcb9f67551a45397735e47b6d456eb8cd549",
              "status": "affected",
              "version": "d021c344051af91f42c5ba9fdedc176740cbd238",
              "versionType": "git"
            },
            {
              "lessThan": "5f326fe2aef411a6575628f92bd861463ea91df7",
              "status": "affected",
              "version": "d021c344051af91f42c5ba9fdedc176740cbd238",
              "versionType": "git"
            },
            {
              "lessThan": "87cd1bbd6677411e17369cd4b7389ab1e1fdba44",
              "status": "affected",
              "version": "d021c344051af91f42c5ba9fdedc176740cbd238",
              "versionType": "git"
            },
            {
              "lessThan": "787468ee7a435777521d33399d012fd591ae2f94",
              "status": "affected",
              "version": "d021c344051af91f42c5ba9fdedc176740cbd238",
              "versionType": "git"
            },
            {
              "lessThan": "addd62a8cb6fa90aa322365c62487da61f6baab8",
              "status": "affected",
              "version": "d021c344051af91f42c5ba9fdedc176740cbd238",
              "versionType": "git"
            },
            {
              "lessThan": "b9208492fcaecff8f43915529ae34b3bcb03877c",
              "status": "affected",
              "version": "d021c344051af91f42c5ba9fdedc176740cbd238",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/vmw_vsock/af_vsock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.9"
            },
            {
              "lessThan": "3.9",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.303",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.268",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.231",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.181",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.102",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.25",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.16.*",
              "status": "unaffected",
              "version": "5.16.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.17",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.303",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.268",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.231",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.181",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.102",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.25",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.16.11",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.17",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: remove vsock from connected table when connect is interrupted by a signal\n\nvsock_connect() expects that the socket could already be in the\nTCP_ESTABLISHED state when the connecting task wakes up with a signal\npending. If this happens the socket will be in the connected table, and\nit is not removed when the socket state is reset. In this situation it\u0027s\ncommon for the process to retry connect(), and if the connection is\nsuccessful the socket will be added to the connected table a second\ntime, corrupting the list.\n\nPrevent this by calling vsock_remove_connected() if a signal is received\nwhile waiting for a connection. This is harmless if the socket is not in\nthe connected table, and if it is in the table then removing it will\nprevent list corruption from a double add.\n\nNote for backporting: this patch requires d5afa82c977e (\"vsock: correct\nremoval of socket from the list\"), which is in all current stable trees\nexcept 4.9.y."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is in the AF_VSOCK connect(2) syscall path (vsock_connect); vsock is a local socket family and is not reached by processing remote network packets.\nAC:L - An unprivileged attacker can drive both sides\u2014listen and accept via vsock loopback (CONFIG_VSOCKETS_LOOPBACK defaults to y) or a reachable virtio-vsock peer, and deliver a signal to the connecting task\u2014so the ESTABLISHED-plus-signal window is attacker-controlled and reliably repeatable.\nPR:L - Creating an AF_VSOCK SOCK_STREAM socket and connecting to a non-reserved port requires no capabilities; vsock_create/vsock_connect perform no privilege checks for this path.\nUI:N - The attacker opens the socket, connects, signals their own process, and retries connect without any separate victim action.\nS:U - Corruption is confined to the local kernel\u0027s vsock_connected_table and is a standard in-kernel privilege-escalation impact, not a guest-to-host or other cross-boundary escape.\nC:H - Double list_add corrupts kernel list pointers in the connected hash table; corrupted list walks and subsequent list operations can be leveraged as an arbitrary kernel read primitive under standard heap/list exploitation.\nI:H - Re-adding an already-linked connected_table node corrupts the doubly-linked list so later list_del/list traversal can perform attacker-influenced pointer writes, enabling arbitrary write and control-flow hijacking.\nA:H - The corrupted connected table is walked and unlinked on packet lookup and socket release, which can oops/BUG the kernel (including under CONFIG_LIST_HARDENED double-add detection)."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:52:16.369Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/0bb88f3f7e8d506f3efe46d694964117e20efbfc"
        },
        {
          "url": "https://git.kernel.org/stable/c/e3b3939fd137aab6d00d54bee0ee9244b286a608"
        },
        {
          "url": "https://git.kernel.org/stable/c/2910bcb9f67551a45397735e47b6d456eb8cd549"
        },
        {
          "url": "https://git.kernel.org/stable/c/5f326fe2aef411a6575628f92bd861463ea91df7"
        },
        {
          "url": "https://git.kernel.org/stable/c/87cd1bbd6677411e17369cd4b7389ab1e1fdba44"
        },
        {
          "url": "https://git.kernel.org/stable/c/787468ee7a435777521d33399d012fd591ae2f94"
        },
        {
          "url": "https://git.kernel.org/stable/c/addd62a8cb6fa90aa322365c62487da61f6baab8"
        },
        {
          "url": "https://git.kernel.org/stable/c/b9208492fcaecff8f43915529ae34b3bcb03877c"
        }
      ],
      "title": "vsock: remove vsock from connected table when connect is interrupted by a signal",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-48786",
    "datePublished": "2024-07-16T11:43:43.677Z",
    "dateReserved": "2024-07-16T11:38:08.890Z",
    "dateUpdated": "2026-08-05T08:52:16.369Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2024:3251-1

CVE-2021-4440 (GCVE-0-2021-4440)

CVE-2021-47257 (GCVE-0-2021-47257)

CVE-2021-47289 (GCVE-0-2021-47289)

CVE-2021-47341 (GCVE-0-2021-47341)

CVE-2021-47373 (GCVE-0-2021-47373)

CVE-2021-47425 (GCVE-0-2021-47425)

CVE-2021-47549 (GCVE-0-2021-47549)

CVE-2022-48751 (GCVE-0-2022-48751)

CVE-2022-48769 (GCVE-0-2022-48769)

CVE-2022-48786 (GCVE-0-2022-48786)

Tags

Sightings

Nomenclature

Related by attack behaviour