PT-2021-8130 · Linux+2 · Linux Kernel+2

Patrik Lantz · Published 2021-12-16 · Updated 2025-01-16 · CVE-2021-47087

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the optee component of the Linux kernel, where a bug in the page free mechanism can lead to incorrect memory deallocation. This can cause a denial of service. The problem arises when the pointer to allocated pages (struct page *page) is used to free pages using free pages(page, order), which can result in freeing arbitrary pages.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-763

CWE-401

Related Identifiers

BDU:2024-08387

CVE-2021-47087

OPENSUSE-SU-2024_1321-1

OPENSUSE-SU-2024_1322-1

OPENSUSE-SU-2024_1322-2

OPENSUSE-SU-2024_1332-1

OPENSUSE-SU-2024_1332-2

OPENSUSE-SU-2024_1466-1

OPENSUSE-SU-2024_1480-1

OPENSUSE-SU-2024_1489-1

OPENSUSE-SU-2024_1490-1

SUSE-SU-2024:1320-1

SUSE-SU-2024:1321-1

SUSE-SU-2024:1465-1

SUSE-SU-2024:1466-1

SUSE-SU-2024:1480-1

SUSE-SU-2024:1489-1

SUSE-SU-2024:1490-1

Affected Products

Linux Kernel

Red Os

Suse

References · 699

• 🔥 https://github.com/Kakashiiiiy/CVE-2021-29155 · Exploit
• 🔥 https://github.com/benschlueter/CVE-2021-29155 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2024:1489-1 · Vendor Advisory
• https://git.kernel.org/stable/c/806142c805cacd098e61bdc0f72c778a2389fe4a · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1320-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1466-1 · Vendor Advisory
• https://git.kernel.org/stable/c/91e94e42f6fc49635f1a16d8ae3f79552bcfda29 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47087 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:1480-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-08387 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47087 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47087 · Security Note
• https://git.kernel.org/stable/c/ad338d825e3f7b96ee542bf313728af2d19fe9ad · Patch
• https://osv.dev/vulnerability/CVE-2021-47087 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1490-1 · Vendor Advisory