PT-2024-11141 · Linux · Linux Kernel

Krzysztof Kozlowski · Published 2021-04-13 · Updated 2024-12-09 · CVE-2021-47050

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A possible NULL pointer dereference of resource issue has been resolved in the Linux kernel. The platform get resource byname() function can return NULL, which would be immediately dereferenced by resource size(). To fix this, the resource is now dereferenced after validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-07259

CVE-2021-47050

Affected Products

Linux Kernel

References · 23

• https://git.kernel.org/stable/c/59e27d7c94aa02da039b000d33c304c179395801 · Patch
• https://git.kernel.org/stable/c/e16acc3a37f09e18835dc5d8014942c2ef6ca957 · Patch
• https://cve.org/CVERecord?id=CVE-2021-47050 · Security Note
• https://git.kernel.org/stable/c/a74cb41af7dbe019e4096171f8bc641c7ce910ad · Patch
• https://bdu.fstec.ru/vul/2025-07259 · Security Note
• https://osv.dev/vulnerability/CVE-2021-47050 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47050 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47050 · Vendor Advisory
• https://git.kernel.org/stable/c/71bcc1b4a1743534d8abdcb57ff912e6bc390438 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47050 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47050 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-47050 · Vendor Advisory
• https://t.me/cvenotify/103596 · Telegram Post
• https://lore.kernel.org/linux-cve-announce/2024022840-CVE-2021-47050-5ba5@gregkh/T/#u · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.21 · Note