PT-2024-11235 · Linux+2 · Linux Kernel+2

Published 2021-06-08 · Updated 2025-04-29 · CVE-2021-47227

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to state corruption in the fpu restore sig() function. The non-compacted slowpath uses copy from user() and copies the entire user buffer into the kernel buffer, verbatim, which can lead to entirely invalid state on which XRSTOR will #GP. The validate user xstate header() function can detect some of that corruption, but it leaves the onus on callers to clear the buffer. To avoid corruption of the kernel XSAVE buffer, the copy user to xstate() function is used, which validates the XSAVE header contents before copying the actual states to the kernel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Check for Exceptional Conditions

RCE

Weakness Enumeration

CWE-754

CWE-20

Related Identifiers

BDU:2025-03664

CVE-2021-47227

OPENSUSE-SU-2024_2185-1

SUSE-SU-2024:2010-1

SUSE-SU-2024:2185-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 424

• https://osv.dev/vulnerability/CVE-2021-47227 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47227 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-47227 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47227 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2185-1 · Vendor Advisory
• https://git.kernel.org/stable/c/076f732b16a5bf842686e1b43ab6021a2d98233e · Patch
• https://git.kernel.org/stable/c/ec25ea1f3f05d6f8ee51d1277efea986eafd4f2a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47227 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2010-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-03664 · Security Note
• https://ubuntu.com/security/CVE-2021-47227 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47227 · Vendor Advisory
• https://git.kernel.org/stable/c/484cea4f362e1eeb5c869abbfb5f90eae6421b38 · Patch
• https://suse.com/security/cve/CVE-2021-47329 · Note
• https://suse.com/security/cve/CVE-2024-27413 · Note