PT-2024-11331 · Linux+2 · Linux Kernel+2

Takashi Iwai · Published 2021-05-17 · Updated 2024-12-24 · CVE-2021-47332

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.13.3

Description A null pointer dereference issue has been identified in the Linux kernel, specifically in the ALSA component. The problem arises when the function free pages exact() is called with a NULL address, which can lead to a system compromise. The issue is resolved by adding a proper NULL check to avoid possible errors.

Recommendations As a temporary workaround, consider adding a NULL check before calling the free pages exact() function to prevent potential system compromise. Upgrade to a version of the Linux kernel that is 5.13.3 or later to fully resolve the issue.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-07399

CVE-2021-47332

OPENSUSE-SU-2024_2185-1

SUSE-SU-2024:2010-1

SUSE-SU-2024:2183-1

SUSE-SU-2024:2185-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 431

• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47332 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-47332 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47332 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47332 · Vendor Advisory
• https://git.kernel.org/stable/c/bee295f5e03510252d18b25cc1d26230256eb87a · Patch
• https://git.kernel.org/stable/c/88262229b778f4f7a896da828d966f94dcb35d19 · Patch
• https://git.kernel.org/stable/c/7d7f30cf182e55023fa8fde4c084b2d37c6be69d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2185-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47332 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2183-1 · Vendor Advisory
• https://git.kernel.org/stable/c/cae0cf651adccee2c3f376e78f30fbd788d0829f · Patch
• https://git.kernel.org/stable/c/82e5ee742fdd8874fe996181b87fafe1eb5f1196 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2010-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07399 · Security Note
• https://osv.dev/vulnerability/CVE-2021-47332 · Vendor Advisory