PT-2024-9046 · Linux+3 · Linux Kernel+3

Qian Cai · Published 2024-05-24 · Updated 2025-09-18 · CVE-2021-47553

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the Linux kernel's sched/scs component, where a stale state can be left after a CPU is offlined and then onlined back into the kernel. This stale state can cause problems with execution, including bogus KASAN warnings and memory leaks. The issue arises when the idle task on a CPU calls a few layers of C code before leaving the kernel, and when KASAN is in use, poisoned shadow is left around for each active stack frame. The problem can be exacerbated across multiple hotplug cycles, potentially making the entire shadow call stack unusable.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Uninitialized Resource

Memory Leak

Weakness Enumeration

CWE-908

CWE-401

Related Identifiers

BDU:2024-10728

CVE-2021-47553

OPENSUSE-SU-2024_2189-1

SUSE-SU-2024:2008-1

SUSE-SU-2024:2011-1

SUSE-SU-2024:2019-1

SUSE-SU-2024:2189-1

SUSE-SU-2024:2190-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1246

• https://osv.dev/vulnerability/SUSE-SU-2024:2019-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47553 · Security Note
• https://osv.dev/vulnerability/CVE-2021-47553 · Vendor Advisory
• https://git.kernel.org/stable/c/dce1ca0525bfdc8a69a9343bc714fbc19a2f04b3 · Patch
• https://git.kernel.org/stable/c/e6ee7abd6bfe559ad9989004b34c320fd638c526 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2190-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-47553 · Vendor Advisory
• https://git.kernel.org/stable/c/229c555260cb9c1ccdab861e16f0410f1718f302 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2008-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47553 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47553 · Security Note
• https://bdu.fstec.ru/vul/2024-10728 · Security Note
• https://ubuntu.com/security/CVE-2021-47553 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2189-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47553 · Vendor Advisory