PT-2024-9084 · Linux+7 · Linux Kernel+7

Baruch Siach · Published 2024-05-24 · Updated 2025-07-16 · CVE-2021-47527

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a memory leak in the serial core of the Linux kernel. The problem occurs because the transmit buffer is not freed after it is closed, which can cause issues when the buffer is reopened. This can lead to indefinite waiting for the buffer to drain or the transmission of stale data. The buffer leak can also occur when a port is unbound. The port lock is held when clearing the buffer pointer due to a race condition.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALSA-2024:7000

ALSA-2024:7001

BDU:2024-10766

CESA-2024_7000

CESA-2024_7001

CVE-2021-47527

INFSA-2024_7000

INFSA-2024_7001

OPENSUSE-SU-2024_2185-1

OPENSUSE-SU-2024_2189-1

RHSA-2024:7000

RHSA-2024:7001

RHSA-2024_7000

RHSA-2024_7001

RHSA-2025:13135

RLSA-2024:7001

SUSE-SU-2025_02334-1

Affected Products

Almalinux

Astra Linux

Centos

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

References · 444

• https://git.kernel.org/stable/c/c5da8aa441053958594f94254592bb41264bdfbf · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47527 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10766 · Security Note
• https://git.kernel.org/stable/c/00de977f9e0aa9760d9a79d1e41ff780f74e3424 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47527 · Security Note
• https://git.kernel.org/stable/c/e1722acf4f0d4d67b60f57e08ce16f8b66cd4b8f · Patch
• https://git.kernel.org/stable/c/64e491c1634b73d3bddc081d08620bdc92ab2c12 · Patch
• https://ubuntu.com/security/CVE-2021-47527 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47527 · Vendor Advisory
• https://git.kernel.org/stable/c/e74d9663fd57640fc3394abb5c76fa95b9cc2f2e · Patch
• https://osv.dev/vulnerability/CVE-2021-47527 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:7000 · Vendor Advisory
• https://git.kernel.org/stable/c/1179b168fa3f3a6aae3bd140000455a0e58457db · Patch
• https://osv.dev/vulnerability/ALSA-2024:7000 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:7001 · Vendor Advisory