PT-2024-11128 · Linux · Linux Kernel

Published 2021-04-12 · Updated 2025-01-09 · CVE-2021-47029

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.4.98

Description A vulnerability in the Linux kernel has been resolved, which fixes a kernel warning when adding a monitor interface in the mt76 connac mcu uni add dev routine. The issue is related to the mt76 connac lib module and affects the Linux kernel version 5.4.98. The vulnerability is caused by a warning in the CPU, specifically in the mt76 connac mcu uni add dev function, which is called by the mt7921 eeprom init function. The call trace shows that the issue is related to the addition of a virtual monitor interface.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for this vulnerability. Specifically, update to a version later than 5.4.98. As a temporary workaround, consider disabling the mt76 connac mcu uni add dev function until a patch is available. Restrict access to the vulnerable module mt76 connac lib to minimize the risk of exploitation. Avoid using the mt76 connac mcu uni add dev function in the affected API endpoint until the issue is resolved.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-07250

CVE-2021-47029

Affected Products

Linux Kernel

References · 15

• https://git.kernel.org/stable/c/2554b9cb4b5e097c6071ec3ed5bc7c665c477ca7 · Patch
• https://git.kernel.org/stable/c/c996f0346e40e3b1ac2ebaf0681df898fb157f60 · Patch
• https://osv.dev/vulnerability/CVE-2021-47029 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47029 · Security Note
• https://cve.org/CVERecord?id=CVE-2021-47029 · Security Note
• https://bdu.fstec.ru/vul/2025-07250 · Security Note
• https://ubuntu.com/security/CVE-2021-47029 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47029 · Vendor Advisory
• https://git.kernel.org/linus/c996f0346e40e3b1ac2ebaf0681df898fb157f60 · Note
• https://lore.kernel.org/linux-cve-announce/2024022835-CVE-2021-47029-2c85@gregkh/T/#u · Note
• https://lore.kernel.org/linux-cve-announce/2024022835-CVE-2021-47029-2c85@gregkh · Note
• https://twitter.com/CVEnew/status/1762754399712227685 · Twitter Post
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.4 · Note
• https://t.me/cvenotify/106923 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47029 · Note