PT-2024-11332 · Linux+2 · Linux Kernel+2

Tong Zhang · Published 2021-05-14 · Updated 2025-04-02 · CVE-2021-47333

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description There is an issue with the ASPM (optional) capability checking function in the Linux kernel. A device might be attached to the root complex directly, resulting in a null pointer dereference. The alcor pci init check aspm function checks the PCI link's ASPM capability and populates parent cap off, which is used later by alcor pci aspm ctrl to dynamically turn on/off the device. To avoid this issue, the capability check can be skipped if the device is on the root complex, effectively disabling ASPM for the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-07401

CVE-2021-47333

OPENSUSE-SU-2024_2185-1

SUSE-SU-2024:2010-1

SUSE-SU-2024:2183-1

SUSE-SU-2024:2185-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 432

• https://git.kernel.org/stable/c/717cf5ae52322ddbdf3ac2c584b34c5970b0d174 · Patch
• https://git.kernel.org/stable/c/58f69684ba03e5b0e0a3ae844a845280c0f06309 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2185-1 · Vendor Advisory
• https://git.kernel.org/stable/c/d2639ffdcad463b358b6bef8645ff81715daffcb · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47333 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47333 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2183-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07401 · Security Note
• https://osv.dev/vulnerability/CVE-2021-47333 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47333 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2010-1 · Vendor Advisory
• https://git.kernel.org/stable/c/09d154990ca82d14aed2b72796f6c8845e2e605d · Patch
• https://git.kernel.org/stable/c/3ce3e45cc333da707d4d6eb433574b990bcc26f5 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47333 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-47333 · Vendor Advisory