PT-2024-11248 · Linux+2 · Linux Kernel+2

Syzbot · Published 2021-06-14 · Updated 2025-06-18 · CVE-2021-47240

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a slab-out-of-bounds read in the qrtr endpoint post function. The problem occurs when the size from qrtr hdr is set to 4294967293 (0xfffffffd), causing the ALIGN(size, 4) function to return 0. This can lead to an out-of-bounds read from the data buffer, which is allocated with a size of hdrlen. The issue is caused by a wrong size type in the if (len != ALIGN(size, 4) + hdrlen) check.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-07333

CVE-2021-47240

OPENSUSE-SU-2024_2185-1

SUSE-SU-2024:2010-1

SUSE-SU-2024:2183-1

SUSE-SU-2024:2185-1

SUSE-SU-2025:01995-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 575

• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47240 · Vendor Advisory
• https://git.kernel.org/stable/c/26b8d10703a9be45d6097946b2b4011f7dd2c56f · Patch
• https://git.kernel.org/stable/c/960b08dd36de1e341e3eb43d1c547513e338f4f8 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2185-1 · Vendor Advisory
• https://git.kernel.org/stable/c/ad9d24c9429e2159d1e279dc3a83191ccb4daf1d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2183-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07333 · Security Note
• https://git.kernel.org/stable/c/f8111c0d7ed42ede41a3d0d393b104de0730a8a6 · Patch
• https://security-tracker.debian.org/tracker/CVE-2021-47240 · Vendor Advisory
• https://git.kernel.org/stable/c/19892ab9c9d838e2e5a7744d36e4bb8b7c3292fe · Patch
• https://cve.org/CVERecord?id=CVE-2021-47240 · Security Note
• https://ubuntu.com/security/CVE-2021-47240 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47240 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2010-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01995-1 · Vendor Advisory