PT-2021-8127 · Linux+2 · Linux Kernel+2

Hulk Robot + 1 · Published 2021-12-25 · Updated 2025-02-14 · CVE-2021-47090

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0-rc6-dirty #373

Description The issue is related to the mm/hwpoison component of the Linux kernel, where an error in resource management can cause a panic when testing madvise() with MADV SOFT OFFLINE. The BUG() is triggered when retrying get any page() due to the MF COUNT INCREASED flag being kept in the second try, but the refcnt is not increased. This results in a kernel BUG at include/linux/mm.h:737 and an invalid opcode.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2024-08384

CVE-2021-47090

OESA-2024-1535

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 45

• https://nvd.nist.gov/vuln/detail/CVE-2024-26751 · Security Note
• https://osv.dev/vulnerability/OESA-2024-1535 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-24860 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-26777 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-26884 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47183 · Security Note
• https://git.kernel.org/stable/c/1f207076740101fed87074a6bc924dbe806f08a5 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47090 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26764 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47090 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-26778 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-26810 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47100 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-47090 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47210 · Security Note