PT-2025-40104 · Linux+1 · Linux Kernel+1

Published 2025-10-01 · Updated 2025-11-24 · CVE-2021-4460

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the drm/amdkfd module. A shift-out-of-bounds warning can occur if get num sdma queues or get num xgmi sdma queues returns 0, leading to a shift operation where the number of bits shifted equals the number of bits in the operand, resulting in undefined behavior. To address this, num sdma queues or num xgmi sdma queues is set to ULLONG MAX if the count is greater than or equal to the number of bits in the operand.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2021-4460

RHSA-2022:1988

RHSA-2026:6953

RHSA-2026:7003

SUSE-SU-2025:03613-1

SUSE-SU-2025:03626-1

SUSE-SU-2025:4189-1

SUSE-SU-2025_4189-1

Affected Products

Linux Kernel

Suse

References · 479

• https://osv.dev/vulnerability/SUSE-SU-2025:03626-1 · Vendor Advisory
• https://git.kernel.org/stable/c/9069b1b542de8f3bbffef868aff41521b21485cf · Patch
• https://git.kernel.org/stable/c/0c0356ef2498c1a250fe3846f30293f828737309 · Patch
• https://security-tracker.debian.org/tracker/CVE-2021-4460 · Vendor Advisory
• https://git.kernel.org/stable/c/50e2fc36e72d4ad672032ebf646cecb48656efe0 · Patch
• https://osv.dev/vulnerability/CVE-2021-4460 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4460 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-4460 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-4460 · Security Note
• https://git.kernel.org/stable/c/3fdc5182700910a685d23df57d65166e8556a266 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-4460 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-4460 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03613-1 · Vendor Advisory
• https://git.kernel.org/stable/c/1874b0ef1426b873de94c61861e38f29a8df714c · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4189-1 · Vendor Advisory