PT-2021-8011 · Nvidia · Tegra30

Peter Geis · Published 2021-03-26 · Updated 2024-12-10 · CVE-2021-47067

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a bug in the code that causes a voltage coupler lockup when the voltage-spread is out of range. This problem is observed on Tegra30 Ouya game console once system-wide DVFS is enabled in a device-tree. The max-spread requirement shall be accounted when CPU regulator doesn't have consumers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Improper Locking

RCE

Weakness Enumeration

CWE-404

CWE-667

CWE-20

Related Identifiers

BDU:2024-01827

CVE-2021-47067

Affected Products

Tegra30

References · 23

• https://ubuntu.com/security/CVE-2021-47067 · Vendor Advisory
• https://git.kernel.org/stable/c/ff39adf5d31c72025bba799aec69c5c86d81d549 · Patch
• https://git.kernel.org/stable/c/a1ad124c836816fac8bd5e461d36eaf33cee4e24 · Patch
• https://git.kernel.org/stable/c/ef85bb582c41524e9e68dfdbde48e519dac4ab3d · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47067 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47067 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47067 · Security Note
• https://git.kernel.org/stable/c/dc4452867200fa94589b382740952b58aa1c3e6c · Patch
• https://security-tracker.debian.org/tracker/CVE-2021-47067 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47067 · Security Note
• https://bdu.fstec.ru/vul/2024-01827 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47067 · Vendor Advisory
• https://vuldb.com/ru/?id.255352 · Note
• https://twitter.com/CVEnew/status/1763333513514717288 · Twitter Post
• https://git.kernel.org/linus/ef85bb582c41524e9e68dfdbde48e519dac4ab3d · Note