PT-2024-11326 · Linux+1 · Linux Kernel+1

Xiyu Yang · Published 2021-06-11 · Updated 2025-04-02 · CVE-2021-47327

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A reference counting issue in the Linux kernel's iommu/arm-smmu component causes a refcount leak when arm smmu rpm get() fails. The arm smmu rpm get() function invokes pm runtime get sync(), increasing the refcount of the "smmu" even if the return value is less than 0. This issue occurs in some error handling paths of arm smmu rpm get() in its caller functions, where the refcount of "smmu" is not decreased when arm smmu rpm get() fails. To fix this issue, pm runtime resume and get() is called instead of pm runtime get sync() in arm smmu rpm get(), keeping the refcount balanced in case of failure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-911

Related Identifiers

BDU:2025-07340

CVE-2021-47327

Affected Products

Astra Linux

Linux Kernel

References · 22

• https://git.kernel.org/stable/c/fe92c058199067ae90cf2a901ddf3c271893557a · Patch
• https://git.kernel.org/stable/c/fbf4daa6f4105e01fbd3868006f65c163365c1e3 · Patch
• https://git.kernel.org/stable/c/c4007596fbdabc29f858dc2e1990858a146b60b2 · Patch
• https://ubuntu.com/security/CVE-2021-47327 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47327 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47327 · Security Note
• https://git.kernel.org/stable/c/1adf30f198c26539a62d761e45af72cde570413d · Patch
• https://git.kernel.org/stable/c/3761ae0d0e549f2acdaf11f49df4ed06d256b20f · Patch
• https://security-tracker.debian.org/tracker/CVE-2021-47327 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47327 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47327 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07340 · Security Note
• https://cve.org/CVERecord?id=CVE-2021-47327 · Security Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.52 · Note
• https://t.me/cvenotify/117357 · Telegram Post