PT-2024-11121 · Linux · Linux Kernel

Published 2021-04-21 · Updated 2025-01-08 · CVE-2021-47019

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel, specifically with the mt76: mt7921 module, where a possible invalid register access can occur. This happens when the interrupt is not properly disabled and synchronized for pending IRQ handlers after the system is suspended, leading to potential invalid register access acts when the host PCIe controller is suspended. The problem is associated with the mt76 mmio rr and mt7921 rr functions, as well as the mt7921 irq tasklet function. A call trace is provided, showing the sequence of events leading to the issue, including the involvement of tasklet action common, tasklet action, and other kernel functions. The error results in a kernel panic with a fatal exception in interrupt.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-19

Related Identifiers

BDU:2025-06545

CVE-2021-47019

Affected Products

Linux Kernel

References · 15

• https://cve.org/CVERecord?id=CVE-2021-47019 · Security Note
• https://bdu.fstec.ru/vul/2025-06545 · Security Note
• https://git.kernel.org/stable/c/b13cbc536990ff609afa878b6211cd6f6265ba60 · Patch
• https://git.kernel.org/stable/c/fe3fccde8870764ba3e60610774bd7bc9f8faeff · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47019 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47019 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47019 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47019 · Vendor Advisory
• https://twitter.com/CVEnew/status/1762754408633545118 · Twitter Post
• https://lore.kernel.org/linux-cve-announce/2024022832-CVE-2021-47019-9b9a@gregkh · Note
• https://t.me/cvenotify/106807 · Telegram Post
• https://git.kernel.org/linus/fe3fccde8870764ba3e60610774bd7bc9f8faeff · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47019 · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.4 · Note
• https://lore.kernel.org/linux-cve-announce/2024022832-CVE-2021-47019-9b9a@gregkh/T/#u · Note