PT-2024-11197 · Linux · Linux Kernel

Dan Carpenter · Published 2021-05-12 · Updated 2024-12-12 · CVE-2021-47148

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow issue has been resolved in the Linux kernel. The issue is located in the otx2 set rxfh context() function, which is called from ethtool set rxfh(). The *rss context variable comes from the user and can cause memory corruption if not properly checked. To prevent this, bounds checking has been added.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2025-07314

CVE-2021-47148

Affected Products

Linux Kernel

References · 14

• https://git.kernel.org/stable/c/e5cc361e21648b75f935f9571d4003aaee480214 · Patch
• https://security-tracker.debian.org/tracker/CVE-2021-47148 · Vendor Advisory
• https://git.kernel.org/stable/c/389146bc6d2bbb20714d06624b74856320ce40f7 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47148 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07314 · Security Note
• https://cve.org/CVERecord?id=CVE-2021-47148 · Security Note
• https://ubuntu.com/security/CVE-2021-47148 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47148 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47148 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47148 · Security Note
• https://lore.kernel.org/linux-cve-announce/2024032559-CVE-2021-47148-502f@gregkh · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.9 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47148 · Note
• https://twitter.com/CVEnew/status/1772190600101597425 · Twitter Post