PT-2024-11069 · Linux · Linux Kernel

Published 2021-04-26 · Updated 2024-11-01 · CVE-2021-46957

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12.0

Description The vulnerability occurs when the sys read function is traced by kprobe, leading to a kernel panic. The execution of sys read hits a BUG ON() in find get block after installing kprobe at sys read. A simple reproducer involves installing a kprobe at the entry of sys read and enabling it, then triggering the bug by reading from a file. The bug is caused by the kernel's handling of instruction page faults when single-stepping through the sys read function.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the riscv/kprobe vulnerability. Specifically, for Linux kernel version 5.12.0, ensure that the kernel is updated to a version that includes the patch for this issue. If the kernel version is prior to 5.12.0, update to version 5.12.0 or later to mitigate the vulnerability.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-02874

CVE-2021-46957

Affected Products

Linux Kernel

References · 16

• https://bdu.fstec.ru/vul/2025-02874 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-46957 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46957 · Security Note
• https://git.kernel.org/stable/c/b1ebaa0e1318494a7637099a26add50509e37964 · Patch
• https://cve.org/CVERecord?id=CVE-2021-46957 · Security Note
• https://git.kernel.org/stable/c/fd0f06590d35c99f98d12c7984897ec4201a6263 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-46957 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-46957 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-46957 · Vendor Advisory
• https://lore.kernel.org/linux-cve-announce/2024022718-CVE-2021-46957-90af@gregkh/T/#u · Note
• https://twitter.com/ky1ebot/status/1762903790536327237 · Twitter Post
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.3 · Note
• https://twitter.com/CVEnew/status/1762551309264187761 · Twitter Post
• https://lore.kernel.org/linux-cve-announce/2024022718-CVE-2021-46957-90af@gregkh · Note
• https://git.kernel.org/linus/b1ebaa0e1318494a7637099a26add50509e37964 · Note