PT-2024-11287 · Linux+1 · Linux Kernel+1

Íñigo Huguet · Published 2021-05-21 · Updated 2024-12-26 · CVE-2021-47283

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The SFC driver in the Linux kernel can be configured via modparam to work using MSI-X, MSI, or legacy IRQ interrupts. However, when using legacy IRQ interrupts, the interrupt was not properly released on module remove due to the flag irqs hooked not being set during initialization. This results in a resource leak, as seen in the example trace during module remove, where a non-empty directory 'irq/125' is removed, leaking at least '0000:3b:00.1'. The issue is related to the unregister irq proc, free desc, irq free descs, mp unmap irq, acpi unregister gsi ioapic, acpi pci irq disable, pci disable device, efx pci remove, pci device remove, device release driver, driver detach, bus remove driver, pci unregister driver, and efx exit module functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

BDU:2025-07386

CVE-2021-47283

Affected Products

Astra Linux

Linux Kernel

References · 18

• https://git.kernel.org/stable/c/8f03eeb6e0a0a0b8d617ee0a4bce729e47130036 · Patch
• https://security-tracker.debian.org/tracker/CVE-2021-47283 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47283 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47283 · Vendor Advisory
• https://git.kernel.org/stable/c/8d717c9135a3340ae62d1699484850bfb4112b0c · Patch
• https://git.kernel.org/stable/c/81c4d1d83f88e15b26f4522a35cba6ffd8c5dfdd · Patch
• https://ubuntu.com/security/CVE-2021-47283 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47283 · Security Note
• https://osv.dev/vulnerability/CVE-2021-47283 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07386 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47283 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.44 · Note
• https://git.linuxtesting.ru/pub/scm/linux/kernel/git/lvc/linux-stable.git/commit/?h=v5.10.176-lvc1&id=8d717c9135a3340ae62d1699484850bfb4112b0c · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.11 · Note
• https://twitter.com/CVEnew/status/1792927997609079193 · Twitter Post