PT-2024-11068 · Linux+2 · Linux Kernel+2

Published 2021-04-14 · Updated 2024-08-19 · CVE-2021-46951

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue occurs when tpm read log efi is called multiple times, which can happen when loading and unloading a TPM2 driver multiple times. This causes the global variable efi tpm final log size to become a negative number due to the subtraction of final events preboot size each time, resulting in an integer underflow. Using a local variable can avoid this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

BDU:2025-02873

CVE-2021-46951

OPENSUSE-SU-2024_1489-1

SUSE-SU-2024:1454-1

SUSE-SU-2024:1465-1

SUSE-SU-2024:1489-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 351

• https://git.kernel.org/stable/c/48cff270b037022e37835d93361646205ca25101 · Patch
• https://git.kernel.org/stable/c/2f12258b5224cfaa808c54fd29345f3c1cbfca76 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-46951 · Vendor Advisory
• https://git.kernel.org/stable/c/3818b753277f5ca0c170bf5b98e0a5a225542fcb · Patch
• https://osv.dev/vulnerability/CVE-2021-46951 · Vendor Advisory
• https://git.kernel.org/stable/c/ac07c557ca12ec9276c0375517bac7ae5be4e50c · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-46951 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1454-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-46951 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1489-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46951 · Security Note
• https://bdu.fstec.ru/vul/2025-02873 · Security Note
• https://cve.org/CVERecord?id=CVE-2021-46951 · Security Note
• https://git.kernel.org/stable/c/60a01ecc9f68067e4314a0b55148e39e5d58a51b · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1465-1 · Vendor Advisory