PT-2024-11187 · Linux+2 · Linux Kernel+2

Aleksander Jan Bajkowski · Published 2021-05-21 · Updated 2024-11-05 · CVE-2021-47137

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to memory corruption in the RX ring of the Linux kernel's lantiq module. When memory allocation or DMA mapping fails, an invalid address is programmed into the descriptor, leading to memory corruption. The patch resolves this by reusing the previous skb and mapping and dropping the packet when memory allocation fails, and also increments the rx drop counter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

CWE-99

Related Identifiers

BDU:2025-07313

CVE-2021-47137

OPENSUSE-SU-2024_1489-1

SUSE-SU-2024:1465-1

SUSE-SU-2024:1489-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 346

• https://bdu.fstec.ru/vul/2025-07313 · Security Note
• https://git.kernel.org/stable/c/c7718ee96dbc2f9c5fc3b578abdf296dd44b9c20 · Patch
• https://git.kernel.org/stable/c/5ac72351655f8b033a2935646f53b7465c903418 · Patch
• https://git.kernel.org/stable/c/8bb1077448d43a871ed667520763e3b9f9b7975d · Patch
• https://cve.org/CVERecord?id=CVE-2021-47137 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47137 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:1489-1 · Vendor Advisory
• https://git.kernel.org/stable/c/46dd4abced3cb2c912916f4a5353e0927db0c4a2 · Patch
• https://ubuntu.com/security/CVE-2021-47137 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47137 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47137 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47137 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1465-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-47137 · Vendor Advisory
• https://bugzilla.suse.com/1221990 · Note