PT-2021-7994 · Linux+1 · Linux Kernel+1

Published 2021-03-30 · Updated 2026-03-14 · CVE-2021-47037

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue exists due to insufficient input validation in the Q6afe-clocks driver. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service. The Q6afe-clocks driver can be reprobed, for example, if the APR services are restarted after a firmware crash. However, the driver will currently fail because hw.init will be cleared during the first probe call. The driver needs to be rewritten to fill the clock data at runtime rather than using a big static array of clocks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2024-01682

CVE-2021-47037

DLA-4327-1

OESA-2024-1394

OESA-2024-1395

OESA-2024-1396

OESA-2024-1397

Affected Products

Debian

Linux Kernel

References · 51

• https://nvd.nist.gov/vuln/detail/CVE-2023-52443 · Security Note
• https://osv.dev/vulnerability/OESA-2024-1396 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2021-47037 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1397 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26589 · Security Note
• https://git.kernel.org/stable/c/96fadf7e8ff49fdb74754801228942b67c3eeebd · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-52601 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-26606 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-26585 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52462 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52476 · Security Note
• https://ubuntu.com/security/CVE-2021-47037 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26593 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52467 · Security Note
• https://git.kernel.org/stable/c/6893df3753beafa5f7351228a9dd8157a57d7492 · Patch