PT-2024-11120 · Linux+4 · Linux Kernel+4

Published 2021-04-22 · Updated 2025-01-08 · CVE-2021-47018

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the definition of the fixmap area in the Linux kernel for powerpc/64. The current definition at the top of the address space or just below KASAN is not valid for PPC64. To resolve this, the fixmap area should be defined at the top of the I/O space for PPC64. Due to circular dependencies, it is not possible to include asm/fixmap.h in asm/book3s/64/pgtable.h, so a fixed size AREA is defined at the top of the I/O space for fixmap, ensuring the size is big enough during build.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALSA-2024:5101

BDU:2025-06544

CESA-2024_5101

CVE-2021-47018

INFSA-2024_5101

RHSA-2024:5101

RHSA-2024_5101

RLSA-2024:5101

RXSA-2024:5101

Affected Products

Almalinux

Centos

Linux Kernel

Red Hat

Rocky Linux

References · 510

• https://bdu.fstec.ru/vul/2025-06544 · Security Note
• https://linux.oracle.com/errata/ELSA-2024-5101.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:5101 · Vendor Advisory
• https://git.kernel.org/stable/c/4b9fb2c9039a206d37f215936a4d5bee7b1bf9cd · Patch
• https://osv.dev/vulnerability/RLSA-2024:5101 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-47018 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47018 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:5101 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-5101.html · Vendor Advisory
• https://git.kernel.org/stable/c/a84df7c80bdac598d6ac9268ae578da6928883e8 · Patch
• https://osv.dev/vulnerability/CVE-2021-47018 · Vendor Advisory
• https://errata.rockylinux.org/RXSA-2024:5101 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47018 · Vendor Advisory
• https://osv.dev/vulnerability/RXSA-2024:5101 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47018 · Security Note