PT-2021-8221 · Linux+3 · Linux Kernel+3

Published 2021-12-14 · Updated 2024-12-02 · CVE-2021-47584

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a divide-by-zero error in the iocost component of the Linux kernel. This error occurs when a cgroup with an active hweight of 1 enters donation calculation, triggering a warning and then a divide-by-zero oops. The donation calculation logic assumes that the donor has non-zero after-donation hweight, and the lowest active hweight a donating cgroup can have is 2. However, with the precise donation algorithm implemented, even low hweight cgroups can donate, leading to this issue. The problem can be fixed by excluding cgroups with active hweight less than 2 from donating.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

BDU:2024-11534

CVE-2021-47584

OPENSUSE-SU-2024_2372-1

OPENSUSE-SU-2024_2394-1

SUSE-SU-2024:2372-1

SUSE-SU-2024:2394-1

SUSE-SU-2024:2902-1

SUSE-SU-2024:2929-1

SUSE-SU-2024:2939-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1206

• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://git.kernel.org/stable/c/3a1a4eb574178c21241a6200f4785572e661c472 · Patch
• https://osv.dev/vulnerability/CVE-2021-47584 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2929-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47584 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47584 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2902-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2939-1 · Vendor Advisory
• https://git.kernel.org/stable/c/edaa26334c117a584add6053f48d63a988d25a6e · Patch
• https://cve.org/CVERecord?id=CVE-2021-47584 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-47584 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2394-1 · Vendor Advisory
• https://git.kernel.org/stable/c/a7c80674538f15f85d68138240aae440b8039519 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47584 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2372-1 · Vendor Advisory