PT-2024-11301 · Linux+1 · Linux Kernel+1

Published 2021-07-13 · Updated 2024-12-26 · CVE-2021-47300

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.13.0-53301-ge6c08cb33a30-dirty #87

Description A bug in the Linux kernel's BPF (Berkeley Packet Filter) subsystem has been identified. The issue arises when the jit subprogs() function fails and attempts to clean up the program to be run under the interpreter, resulting in a freeze. This occurs because the env->prog->aux->tail call reachable condition is never true, causing the program rejection to fail. The bug was introduced by a commit that added a tracker to the check max stack depth() function, which propagates the tail call reachable condition throughout the subprograms.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for the bpf: Fix tail call reachable rejection for interpreter when jit failed vulnerability. As a temporary workaround, consider disabling the BPF JIT (Just-In-Time) compiler until a patched version of the kernel is available.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-07390

CVE-2021-47300

Affected Products

Astra Linux

Linux Kernel

References · 17

• https://git.kernel.org/stable/c/39f1735c8107ef43a53c4daf82f330d880488d8f · Patch
• https://git.kernel.org/stable/c/cbb086074dab631ac43f8645cbac1d7b148e05c4 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47300 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47300 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47300 · Vendor Advisory
• https://git.kernel.org/stable/c/5dd0a6b8582ffbfa88351949d50eccd5b6694ade · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47300 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07390 · Security Note
• https://osv.dev/vulnerability/CVE-2021-47300 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47300 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-47300 · Vendor Advisory
• https://git.linuxtesting.ru/pub/scm/linux/kernel/git/lvc/linux-stable.git/commit/?h=v5.10.176-lvc1&id=39f1735c8107ef43a53c4daf82f330d880488d8f · Note
• https://lore.kernel.org/linux-cve-announce/2024052125-CVE-2021-47300-eee0@gregkh · Note
• https://git.linuxtesting.ru/pub/scm/linux/kernel/git/lvc/linux-stable.git/commit/?h=v5.10.176-lvc1&id=39f1735c8107ef43a53c4daf82f330d880488d8f · Note
• https://git.kernel.org/linus/5dd0a6b8582ffbfa88351949d50eccd5b6694ade · Note