PT-2024-11188 · Linux+2 · Linux Kernel+2

Raju Rangoju · Published 2021-05-19 · Updated 2024-08-19 · CVE-2021-47138

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises when the hardware register containing the server TID base holds invalid values, which can occur when the adapter is in a bad state, such as after an AER fatal error. Reading these invalid values can lead to out-of-bound memory access. The fix involves using the saved server TID base when clearing filters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

BDU:2025-13697

CVE-2021-47138

OPENSUSE-SU-2024_1489-1

RHSA-2024:6297

SUSE-SU-2024:1454-1

SUSE-SU-2024:1465-1

SUSE-SU-2024:1489-1

SUSE-SU-2024:1643-1

SUSE-SU-2024:1646-1

SUSE-SU-2024:1870-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 612

• https://git.kernel.org/stable/c/88c380df84fbd03f9b137c2b9d0a44b9f2f553b0 · Patch
• https://cve.org/CVERecord?id=CVE-2021-47138 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47138 · Security Note
• https://git.kernel.org/stable/c/02f03883fdb10ad7e66717c70ea163a8d27ae6e7 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1646-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-47138 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1454-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1489-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47138 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1643-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47138 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13697 · Security Note
• https://git.kernel.org/stable/c/0bf49b3c8d8b3a43ce09f1b2db70e5484d31fcdf · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47138 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1465-1 · Vendor Advisory