PT-2025-7958 · Linux+3 · Linux Kernel+3

Published 2022-02-10 · Updated 2025-05-21 · CVE-2021-47647

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.10

Description A vulnerability in the Linux kernel has been resolved, which was caused by a missing clock parent. The issue occurred when the pcie0 rchng clk src had num parents set to 2 but only one parent was actually set via parent hws. This caused the kernel to panic on a NULL pointer in clk core get parent by index(). The vulnerability resulted in a kernel oops, which could lead to a system crash.

Recommendations To fix this issue, utilize clk parent data to provide gcc xo gpll0 parent data. Convert existing users of parent names to clk parent data as well. As a temporary workaround, consider disabling the clk core get parent by index() function until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation.

Note: The provided information does not include details about the number of potentially affected devices or real-world incidents.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-03927

CVE-2021-47647

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1340

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/H4K6/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• https://cve.org/CVERecord?id=CVE-2021-47647 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47647 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-47647 · Vendor Advisory
• https://git.kernel.org/stable/c/d02b3d4a8c525068bc5cfb4341e0023d8eb82ace · Patch
• https://ubuntu.com/security/CVE-2021-47647 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47647 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47647 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory