PT-2024-11219 · Linux+2 · Linux Kernel+2

Jonathan Cameron · Published 2021-05-13 · Updated 2024-11-06 · CVE-2021-47172

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a potential overflow in the Linux kernel due to non-sequential channel numbers in the ad7124 driver. Channel numbering must start at 0 and not have any holes to avoid overflowing the available storage. This bug was introduced as part of a fix to ensure the kernel didn't rely on the ordering of child nodes. The kernel needs to support arbitrary ordering, but all channels must be present. The issue was discovered while testing with qemu.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2025-07365

CVE-2021-47172

OPENSUSE-SU-2024_1489-1

SUSE-SU-2024:1454-1

SUSE-SU-2024:1465-1

SUSE-SU-2024:1489-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 347

• https://security-tracker.debian.org/tracker/CVE-2021-47172 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47172 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47172 · Security Note
• https://bdu.fstec.ru/vul/2025-07365 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:1454-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47172 · Vendor Advisory
• https://git.kernel.org/stable/c/f49149964d2423fb618fb6b755bb1eaa431cca2c · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1489-1 · Vendor Advisory
• https://git.kernel.org/stable/c/f2a772c51206b0c3f262e4f6a3812c89a650191b · Patch
• https://git.kernel.org/stable/c/f70122825076117787b91e7f219e21c09f11a5b9 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47172 · Vendor Advisory
• https://git.kernel.org/stable/c/26da8040eccc6c6b0e415e9a3baf72fd39eb2fdc · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1465-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47172 · Security Note
• https://ubuntu.com/security/CVE-2021-47172 · Vendor Advisory