PT-2024-11309 · Linux+2 · Linux Kernel+2

Javed Hasan · Published 2021-06-28 · Updated 2025-04-02 · CVE-2021-47308

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an array index out of bound exception in the fc rport prli resp() function. This exception has been fixed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-07346

CVE-2021-47308

OPENSUSE-SU-2024_2185-1

SUSE-SU-2024:1979-1

SUSE-SU-2024:1983-1

SUSE-SU-2024:2010-1

SUSE-SU-2024:2183-1

SUSE-SU-2024:2184-1

SUSE-SU-2024:2185-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 674

• https://osv.dev/vulnerability/SUSE-SU-2024:1983-1 · Vendor Advisory
• https://git.kernel.org/stable/c/0fe70c15f9435bb3c50954778245d62ee38b0e03 · Patch
• https://git.kernel.org/stable/c/a4a54c54af2516caa9c145015844543cfc84316a · Patch
• https://git.kernel.org/stable/c/b27c4577557045f1ab3cdfeabfc7f3cd24aca1fe · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1979-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47308 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47308 · Vendor Advisory
• https://git.kernel.org/stable/c/44651522941c623e20882b3b443f23f77de1ea8b · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2185-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-47308 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2183-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47308 · Vendor Advisory
• https://git.kernel.org/stable/c/8511293e643a18b248510ae5734e4f360754348c · Patch
• https://osv.dev/vulnerability/CVE-2021-47308 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2184-1 · Vendor Advisory