PT-2024-11350 · Linux+6 · Linux Kernel+6

Xie Yongji · Published 2021-05-31 · Updated 2025-05-12 · CVE-2021-47352

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the virtio-net component in the Linux kernel, where validation for used length from potentially untrusted devices was missing, which could lead to data corruption or loss.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

RCE

Weakness Enumeration

CWE-787

CWE-20

Related Identifiers

ALSA-2024:7000

ALSA-2024:7001

BDU:2025-10238

CESA-2024_7000

CESA-2024_7001

CVE-2021-47352

INFSA-2024_7000

INFSA-2024_7001

RHSA-2024:6753

RHSA-2024:6993

RHSA-2024:7000

RHSA-2024:7001

RHSA-2024_7000

RHSA-2024_7001

RLSA-2024:7001

SUSE-SU-2024:1979-1

SUSE-SU-2024:1983-1

SUSE-SU-2024:2184-1

Affected Products

Almalinux

Astra Linux

Centos

Linux Kernel

Red Hat

Rocky Linux

Suse

References · 882

• https://git.kernel.org/stable/c/c92298d228f61589dd21657af2bea95fc866b813 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47352 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-20471.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47352 · Security Note
• https://git.kernel.org/stable/c/c1b40d1959517ff2ea473d40eeab4691d6d62462 · Patch
• https://security-tracker.debian.org/tracker/CVE-2021-47352 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47352 · Security Note
• https://osv.dev/vulnerability/CVE-2021-47352 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:7001 · Vendor Advisory
• https://git.kernel.org/stable/c/ba710baa1cc1b17a0483f7befe03e696efd17292 · Patch
• https://linux.oracle.com/errata/ELSA-2024-7000.html · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-7000.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10238 · Security Note
• https://ubuntu.com/security/CVE-2021-47352 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1983-1 · Vendor Advisory