PT-2021-8193 · Linux+2 · Linux Kernel+2

Andrey Grodzovsky + 2 · Published 2021-05-19 · Updated 2024-07-18 · CVE-2021-47354

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the drm sched entity kill jobs() function in the Linux kernel, which can cause data corruptions due to a buffer overflow. This can potentially allow a remote attacker to impact the confidentiality and availability of protected information. The problem occurs when a job is killed before all its dependencies are completed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2024-10593

CVE-2021-47354

OESA-2024-1736

OPENSUSE-SU-2024_2185-1

SUSE-SU-2024:2010-1

SUSE-SU-2024:2183-1

SUSE-SU-2024:2185-1

SUSE-SU-2024:2360-1

SUSE-SU-2024:2381-1

SUSE-SU-2024:2561-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 840

• https://osv.dev/vulnerability/SUSE-SU-2024:2381-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2561-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47334 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47474 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2183-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47425 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47249 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-35828 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2360-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47354 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52875 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-27019 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-36886 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47301 · Security Note
• https://git.kernel.org/stable/c/0687411e2a8858262de2fc4a1d576016fd77292e · Patch