PT-2024-11154 · Linux+7 · Linux Kernel+7

Leon Romanovsky · Published 2021-05-17 · Updated 2026-03-14 · CVE-2021-47076

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.13.0-rc1+

Description The vulnerability is related to RDMA/rxe, where an invalid lkey is supplied, causing a kernel panic when an atomic operation is sent with an explicitly wrong lkey. The issue arises from the missing update of WQE status in LOCAL WRITE failures.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-05174

CESA-2022_1988

CVE-2021-47076

DLA-4327-1

OPENSUSE-SU-2024_0857-1

RHSA-2022:1988

RHSA-2022_1988

SUSE-SU-2024:0856-1

SUSE-SU-2024:0857-1

SUSE-SU-2024:0925-1

SUSE-SU-2024:0926-1

SUSE-SU-2024:0975-1

SUSE-SU-2024:0976-1

USN-7159-1

USN-7159-2

USN-7159-3

USN-7159-4

USN-7159-5

USN-7185-1

USN-7185-2

USN-7195-1

USN-7195-2

Affected Products

Astra Linux

Centos

Debian

Linuxmint

Linux Kernel

Red Hat

Suse

Ubuntu

References · 287

• https://osv.dev/vulnerability/DLA-4327-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7159-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36968 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38597 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0926-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47001 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40959 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-1202SE17 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36938 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7159-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-44942 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46724 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7195-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7159-4 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36270 · Vendor Advisory