PT-2024-11085 · Linux+1 · Linux Kernel+1

Stéphane Marchesin · Published 2021-05-12 · Updated 2025-01-10 · CVE-2021-46976

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.4.105-13595-g3cd84167b2df

Description The retire logic in the Linux kernel's drm/i915 module uses the 2 lower bits of the pointer to the retire function to store flags. However, the auto retire function is not guaranteed to be aligned to a multiple of 4, which causes crashes as the system jumps to the wrong address. This issue can be identified by an invalid opcode warning in the kernel logs.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for the drm/i915 auto retire function alignment issue. Specifically, versions prior to the fixed version are vulnerable, so updating to the latest kernel version available for your system is recommended.

Note: The provided input descriptions do not specify the exact fixed version or provide detailed instructions for updating the kernel. Therefore, the recommendation is to update to the latest available kernel version for your system, ensuring it includes the necessary fixes.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-03846

CVE-2021-46976

OPENSUSE-SU-2024_1489-1

SUSE-SU-2024:1465-1

SUSE-SU-2024:1489-1

Affected Products

Linux Kernel

Suse

References · 348

• https://git.kernel.org/stable/c/608441de3976c526b02af4d7063093c8adf351e3 · Patch
• https://git.kernel.org/stable/c/805c990a9c54b9451d3daff640b850909c31ab9d · Patch
• https://ubuntu.com/security/CVE-2021-46976 · Vendor Advisory
• https://git.kernel.org/stable/c/f7520970d5353cb1fa4d9089a1b23669c5da97fe · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1489-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-03846 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-46976 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-46976 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-46976 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-46976 · Vendor Advisory
• https://git.kernel.org/stable/c/402be8a101190969fc7ff122d07e262df86e132b · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1465-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46976 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-46976 · Vendor Advisory
• https://bugzilla.suse.com/1221990 · Note