PT-2024-11371 · Linux+3 · Linux Kernel+3

Jeremy Linton · Published 2021-09-10 · Updated 2024-06-25 · CVE-2021-47374

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the dma-debug feature in the Linux kernel, which can cause runtime problems for some drivers using the DMA API. The error message can be reached several million times per second, leading to spam in the kernel's printk buffer and high CPU usage. To address this, the error message is now handled using err printk() instead of rate limiting, making it easier to identify drivers that suffer from this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Weakness Enumeration

CWE-779

CWE-770

Related Identifiers

BDU:2025-14374

CVE-2021-47374

OPENSUSE-SU-2024_2189-1

SUSE-SU-2024:2008-1

SUSE-SU-2024:2011-1

SUSE-SU-2024:2019-1

SUSE-SU-2024:2189-1

SUSE-SU-2024:2190-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 1244

• https://osv.dev/vulnerability/SUSE-SU-2024:2019-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47374 · Vendor Advisory
• https://git.kernel.org/stable/c/de4afec2d2946c92c62a15ab341c70b287289e6a · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2190-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2008-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-47374 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47374 · Security Note
• https://ubuntu.com/security/CVE-2021-47374 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47374 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47374 · Vendor Advisory
• https://git.kernel.org/stable/c/510e1a724ab1bf38150be2c1acabb303f98d0047 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2189-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14374 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2011-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47374 · Security Note