PT-2024-11136 · Linux+1 · Linux Kernel+1

Syzbot · Published 2021-03-06 · Updated 2024-11-04 · CVE-2021-47044

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A shift-out-of-bounds issue in the load balance() function has been resolved. The issue occurred when the sd->nr balance failed value grew to unexpectedly high values. This happened because a failed load balance() incremented the value without further modification, potentially leading to undefined behavior when the value exceeded the width of the promoted left operand. The fix involves capping the shift exponent to prevent this issue. The problem was identified by Syzbot, which reported high values of sd->nr balance failed, such as 86 and 149.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-05317

CVE-2021-47044

OPENSUSE-SU-2024_1489-1

SUSE-SU-2024:1465-1

SUSE-SU-2024:1489-1

Affected Products

Linux Kernel

Suse

References · 347

• https://git.kernel.org/stable/c/80862cbf76c2646f709a57c4517aefe0b094c774 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47044 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47044 · Security Note
• https://cve.org/CVERecord?id=CVE-2021-47044 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:1489-1 · Vendor Advisory
• https://git.kernel.org/stable/c/39a2a6eb5c9b66ea7c8055026303b3aa681b49a5 · Patch
• https://ubuntu.com/security/CVE-2021-47044 · Vendor Advisory
• https://git.kernel.org/stable/c/805cea93e66ca7deaaf6ad3b67224ce47c104c2f · Patch
• https://bdu.fstec.ru/vul/2025-05317 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-47044 · Vendor Advisory
• https://git.kernel.org/stable/c/2f3eab368e313dba35fc2f51ede778bf7b030b54 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1465-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47044 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47044 · Vendor Advisory
• https://bugzilla.suse.com/1221990 · Note