Every CVE Search/ Get API key

CVE-2021-47005

PCI: endpoint: Fix NULL pointer dereference for ->get_features()

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

PCI: endpoint: Fix NULL pointer dereference for ->get_features()

get_features ops of pci_epc_ops may return NULL, causing NULL pointer dereference in pci_epf_test_alloc_space function. Let us add a check for pci_epc_feature pointer in pci_epf_test_bind before we access it to avoid any such NULL pointer dereference and return -ENOTSUPP in case pci_epc_feature is not found.

When the patch is not applied and EPC features is not implemented in the platform driver, we see the following dump due to kernel NULL pointer dereference.

Call trace: pci_epf_test_bind+0xf4/0x388 pci_epf_bind+0x3c/0x80 pci_epc_epf_link+0xa8/0xcc configfs_symlink+0x1a4/0x48c vfs_symlink+0x104/0x184 do_symlinkat+0x80/0xd4 __arm64_sys_symlinkat+0x1c/0x24 el0_svc_common.constprop.3+0xb8/0x170 el0_svc_handler+0x70/0x88 el0_svc+0x8/0x640 Code: d2800581 b9403ab9 f9404ebb 8b394f60 (f9400400) ---[ end trace a438e3c5a24f9df0 ]---

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.24%Up 0.2 points since Feb 29, 2024
90%50%10%1%

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

PCI: endpoint: Fix NULL pointer dereference for ->get_features()

get_features ops of pci_epc_ops may return NULL, causing NULL pointer dereference in pci_epf_test_alloc_space function. Let us add a check for pci_epc_feature pointer in pci_epf_test_bind before we access it to avoid any such NULL pointer dereference and return -ENOTSUPP in case pci_epc_feature is not found.

When the patch is not applied and EPC features is not implemented in the platform driver, we see the following dump due to kernel NULL pointer dereference.

Call trace: pci_epf_test_bind+0xf4/0x388 pci_epf_bind+0x3c/0x80 pci_epc_epf_link+0xa8/0xcc configfs_symlink+0x1a4/0x48c vfs_symlink+0x104/0x184 do_symlinkat+0x80/0xd4 __arm64_sys_symlinkat+0x1c/0x24 el0_svc_common.constprop.3+0xb8/0x170 el0_svc_handler+0x70/0x88 el0_svc+0x8/0x640 Code: d2800581 b9403ab9 f9404ebb 8b394f60 (f9400400) ---[ end trace a438e3c5a24f9df0 ]---

Record
CVE-2021-47005
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
CVE List No score

PCI: endpoint: Fix NULL pointer dereference for ->get_features()

In the Linux kernel, the following vulnerability has been resolved:

PCI: endpoint: Fix NULL pointer dereference for ->get_features()

get_features ops of pci_epc_ops may return NULL, causing NULL pointer dereference in pci_epf_test_alloc_space function. Let us add a check for pci_epc_feature pointer in pci_epf_test_bind before we access it to avoid any such NULL pointer dereference and return -ENOTSUPP in case pci_epc_feature is not found.

When the patch is not applied and EPC features is not implemented in the platform driver, we see the following dump due to kernel NULL pointer dereference.

Call trace: pci_epf_test_bind+0xf4/0x388 pci_epf_bind+0x3c/0x80 pci_epc_epf_link+0xa8/0xcc configfs_symlink+0x1a4/0x48c vfs_symlink+0x104/0x184 do_symlinkat+0x80/0xd4 __arm64_sys_symlinkat+0x1c/0x24 el0_svc_common.constprop.3+0xb8/0x170 el0_svc_handler+0x70/0x88 el0_svc+0x8/0x640 Code: d2800581 b9403ab9 f9404ebb 8b394f60 (f9400400) ---[ end trace a438e3c5a24f9df0 ]---

Record
CVE-2021-47005
Updated
2026-11-02
EUVDEUVD-2021-33653 No score

In the Linux kernel, the following vulnerability has been resolved:

PCI: endpoint: Fix NULL pointer dereference for ->get_features()

get_features ops of pci_epc_ops may return NULL, causing NULL pointer dereference in pci_epf_test_alloc_space function. Let us add a check for pci_epc_feature pointer in pci_epf_test_bind before we access it to avoid any such NULL pointer dereference and return -ENOTSUPP in case pci_epc_feature is not found.

When the patch is not applied and EPC features is not implemented in the platform driver, we see the following dump due to kernel NULL pointer dereference.

Call trace: pci_epf_test_bind+0xf4/0x388 pci_epf_bind+0x3c/0x80 pci_epc_epf_link+0xa8/0xcc configfs_symlink+0x1a4/0x48c vfs_symlink+0x104/0x184 do_symlinkat+0x80/0xd4 __arm64_sys_symlinkat+0x1c/0x24 el0_svc_common.constprop.3+0xb8/0x170 el0_svc_handler+0x70/0x88 el0_svc+0x8/0x640 Code: d2800581 b9403ab9 f9404ebb 8b394f60 (f9400400) ---[ end trace a438e3c5a24f9df0 ]---

Record
EUVD-2021-33653
Updated
2026-11-02
GitHub AdvisoriesGHSA-43jg-wxfj-4rf7 5.5

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix NULL...

In the Linux kernel, the following vulnerability has been resolved:

PCI: endpoint: Fix NULL pointer dereference for ->get_features()

get_features ops of pci_epc_ops may return NULL, causing NULL pointer dereference in pci_epf_test_alloc_space function. Let us add a check for pci_epc_feature pointer in pci_epf_test_bind before we access it to avoid any such NULL pointer dereference and return -ENOTSUPP in case pci_epc_feature is not found.

When the patch is not applied and EPC features is not implemented in the platform driver, we see the following dump due to kernel NULL pointer dereference.

Call trace: pci_epf_test_bind+0xf4/0x388 pci_epf_bind+0x3c/0x80 pci_epc_epf_link+0xa8/0xcc configfs_symlink+0x1a4/0x48c vfs_symlink+0x104/0x184 do_symlinkat+0x80/0xd4 __arm64_sys_symlinkat+0x1c/0x24 el0_svc_common.constprop.3+0xb8/0x170 el0_svc_handler+0x70/0x88 el0_svc+0x8/0x640 Code: d2800581 b9403ab9 f9404ebb 8b394f60 (f9400400) ---[ end trace a438e3c5a24f9df0 ]---

Record
GHSA-43jg-wxfj-4rf7
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSV 5.5

In the Linux kernel, the following vulnerability has been resolved:

PCI: endpoint: Fix NULL pointer dereference for ->get_features()

get_features ops of pci_epc_ops may return NULL, causing NULL pointer dereference in pci_epf_test_alloc_space function. Let us add a check for pci_epc_feature pointer in pci_epf_test_bind before we access it to avoid any such NULL pointer dereference and return -ENOTSUPP in case pci_epc_feature is not found.

When the patch is not applied and EPC features is not implemented in the platform driver, we see the following dump due to kernel NULL pointer dereference.

Call trace: pci_epf_test_bind+0xf4/0x388 pci_epf_bind+0x3c/0x80 pci_epc_epf_link+0xa8/0xcc configfs_symlink+0x1a4/0x48c vfs_symlink+0x104/0x184 do_symlinkat+0x80/0xd4 __arm64_sys_symlinkat+0x1c/0x24 el0_svc_common.constprop.3+0xb8/0x170 el0_svc_handler+0x70/0x88 el0_svc+0x8/0x640 Code: d2800581 b9403ab9 f9404ebb 8b394f60 (f9400400) ---[ end trace a438e3c5a24f9df0 ]---

Record
CVE-2021-47005
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-47005 5.5

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix NULL pointer dereference for ->get_features() get_features ops of pci_epc_ops may return NULL, causing NULL pointer dereference in pci_epf_test_alloc_space function. Let us add a check for pci_epc_feature pointer in pci_epf_test_bind before we access it to avoid any such NULL pointer dereference and return -ENOTSUPP in case pci_epc_feature is not found. When the patch is not applied and EPC features is not implemented in the platform driver, we see the following dump due to kernel NULL pointer dereference. Call trace: pci_epf_test_bind+0xf4/0x388 pci_epf_bind+0x3c/0x80 pci_epc_epf_link+0xa8/0xcc configfs_symlink+0x1a4/0x48c vfs_symlink+0x104/0x184 do_symlinkat+0x80/0xd4 __arm64_sys_symlinkat+0x1c/0x24 el0_svc_common.constprop.3+0xb8/0x170 el0_svc_handler+0x70/0x88 el0_svc+0x8/0x640 Code: d2800581 b9403ab9 f9404ebb 8b394f60 (f9400400) ---[ end trace a438e3c5a24f9df0 ]---

Record
DEBIAN-CVE-2021-47005
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2021-47005 5.5

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix NULL pointer dereference for ->get_features() get_features ops of pci_epc_ops may return NULL, causing NULL pointer dereference in pci_epf_test_alloc_space function. Let us add a check for pci_epc_feature pointer in pci_epf_test_bind before we access it to avoid any such NULL pointer dereference and return -ENOTSUPP in case pci_epc_feature is not found. When the patch is not applied and EPC features is not implemented in the platform driver, we see the following dump due to kernel NULL pointer dereference. Call trace: pci_epf_test_bind+0xf4/0x388 pci_epf_bind+0x3c/0x80 pci_epc_epf_link+0xa8/0xcc configfs_symlink+0x1a4/0x48c vfs_symlink+0x104/0x184 do_symlinkat+0x80/0xd4 __arm64_sys_symlinkat+0x1c/0x24 el0_svc_common.constprop.3+0xb8/0x170 el0_svc_handler+0x70/0x88 el0_svc+0x8/0x640 Code: d2800581 b9403ab9 f9404ebb 8b394f60 (f9400400) ---[ end trace a438e3c5a24f9df0 ]---

Record
UBUNTU-CVE-2021-47005
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-06
OSVSUSE-SU-2024:0856-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47078: Fixed a bug by clearing all QP fields if creation failed (bsc#1220863)
  • CVE-2021-47076: Fixed a bug by returning CQE error if invalid lkey was supplied (bsc#1220860)
  • CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039)
  • CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
  • CVE-2023-52569: Fixed a bug in btrfs by remoning BUG() after failure to insert delayed dir index item (bsc#1220918).
  • CVE-2023-52482: Fixed a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
  • CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040).
  • CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
  • CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870).
  • CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
  • CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
  • CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932).
  • CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
  • CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
  • CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
  • CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
  • CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
  • CVE-2021-47005: Fixed a NULL pointer dereference for ->get_features() (bsc#1220660).
  • CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
  • CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
  • CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
  • CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
  • CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
  • CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).
  • CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
  • CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
  • CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
  • CVE-2021-47012: Fixed a use after free in siw_alloc_mr (bsc#1220627).
  • CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
  • CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
  • CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
  • CVE-2021-46989: Fixed a bug by preventing corruption in shrinking truncate in hfsplus (bsc#1220737).
  • CVE-2021-46915: Fixed a bug to avoid possible divide error in nft_limit_init (bsc#1220436).
  • CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
  • CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
  • CVE-2020-36784: Fixed reference leak when pm_runtime_get_sync fails (bsc#1220570).
  • CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
  • CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
  • CVE-2023-46343: Fixed a NULL pointer dereference in send_acknowledge() (CVE-2023-46343).
  • CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
  • CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
  • CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
  • CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
  • CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641).…
Record
SUSE-SU-2024:0856-1
Updated
2026-11-02
OSVSUSE-SU-2024:0857-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
  • CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
  • CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
  • CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
  • CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
  • CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
  • CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).
  • CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
  • CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
  • CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
  • CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
  • CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
  • CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
  • CVE-2021-46915: Fixed a bug to avoid possible divide error in nft_limit_init (bsc#1220436).
  • CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
  • CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
  • CVE-2020-36784: Fixed reference leak when pm_runtime_get_sync fails (bsc#1220570).
  • CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
  • CVE-2023-46343: Fixed a NULL pointer dereference in send_acknowledge() (CVE-2023-46343).
  • CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
  • CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
  • CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
  • CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
  • CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641).
  • CVE-2024-26586: Fixed stack corruption (bsc#1220243).
  • CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344).
  • CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump (bsc#1220253).
  • CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835).
  • CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127).
  • CVE-2024-0340: Fixed information disclosure in vhost/vhost.c:vhost_new_msg() (bsc#1218689).
  • CVE-2023-51042: Fixed use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (bsc#1219128).
  • CVE-2021-47078: Fixed a bug by clearing all QP fields if creation failed (bsc#1220863)
  • CVE-2021-47076: Fixed a bug by returning CQE error if invalid lkey was supplied (bsc#1220860)
  • CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039)
  • CVE-2023-52569: Fixed a bug in btrfs by remoning BUG() after failure to insert delayed dir index item (bsc#1220918).
  • CVE-2023-52482: Fixex a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
  • CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040).
  • CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
  • CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870).
  • CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
  • CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
  • CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932).
  • CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
  • CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
  • CVE-2021-47083: Fixed a…
Record
SUSE-SU-2024:0857-1
Updated
2026-11-02
OSVSUSE-SU-2024:0926-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47078: Fixed a bug by clearing all QP fields if creation failed (bsc#1220863)
  • CVE-2021-47076: Fixed a bug by returning CQE error if invalid lkey was supplied (bsc#1220860)
  • CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039)
  • CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
  • CVE-2023-52569: Fixed a bug in btrfs by remoning BUG() after failure to insert delayed dir index item (bsc#1220918).
  • CVE-2023-52482: Fixed a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
  • CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040).
  • CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
  • CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870).
  • CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
  • CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
  • CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932).
  • CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
  • CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
  • CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
  • CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
  • CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
  • CVE-2021-47005: Fixed a NULL pointer dereference for ->get_features() (bsc#1220660).
  • CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
  • CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
  • CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
  • CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
  • CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).
  • CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
  • CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
  • CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
  • CVE-2021-47012: Fixed a use after free in siw_alloc_mr (bsc#1220627).
  • CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
  • CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
  • CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
  • CVE-2021-46989: Fixed a bug by preventing corruption in shrinking truncate in hfsplus (bsc#1220737).
  • CVE-2021-46915: Fixed a bug to avoid possible divide error in nft_limit_init (bsc#1220436).
  • CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
  • CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
  • CVE-2020-36784: Fixed reference leak when pm_runtime_get_sync fails (bsc#1220570).
  • CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
  • CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
  • CVE-2023-46343: Fixed a NULL pointer dereference in send_acknowledge() (CVE-2023-46343).
  • CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
  • CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
  • CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
  • CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
  • CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641).
  • CVE-2024-26586: Fixed stack corruption (bsc#1220243).
  • CVE-2024-26595:…
Record
SUSE-SU-2024:0926-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux
Debian:12
 before 5.10.38-1
5.10.38-1
linux
Debian:13
 before 5.10.38-1
5.10.38-1
linux
Debian:14
 before 5.10.38-1
5.10.38-1
kernel-rt
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 67 CVEs
 before 5.3.18-150300.161.1
5.3.18-150300.161.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 67 CVEs
 before 5.3.18-150300.161.1
5.3.18-150300.161.1
kernel-rt
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 67 CVEs
 before 5.3.18-150300.161.1
5.3.18-150300.161.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 67 CVEs
 before 5.3.18-150300.161.1
5.3.18-150300.161.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-livepatch-SLE15-SP3_Update_42
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 67 CVEs
 before 1-150300.7.3.2
1-150300.7.3.2
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP3
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
Show 69 moreShow less
Affected packages
PackageAffectedFixed
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2.150300.18.90.2
5.3.18-150300.59.153.2.150300.18.90.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-preempt
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.1
5.3.18-150300.59.153.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default-base
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2.150300.18.90.2
5.3.18-150300.59.153.2.150300.18.90.2
kernel-docs
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-preempt
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-source
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-syms
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.1
5.3.18-150300.59.153.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2.150300.18.90.2
5.3.18-150300.59.153.2.150300.18.90.2
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-preempt
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.1
5.3.18-150300.59.153.1
kernel-default
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default-base
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2.150300.18.90.2
5.3.18-150300.59.153.2.150300.18.90.2
kernel-default
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default-base
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2.150300.18.90.2
5.3.18-150300.59.153.2.150300.18.90.2
kernel-64kb
SUSE:Enterprise Storage 7.1
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default
SUSE:Enterprise Storage 7.1
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default-base
SUSE:Enterprise Storage 7.1
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2.150300.18.90.2
5.3.18-150300.59.153.2.150300.18.90.2
kernel-docs
SUSE:Enterprise Storage 7.1
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-obs-build
SUSE:Enterprise Storage 7.1
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-preempt
SUSE:Enterprise Storage 7.1
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-source
SUSE:Enterprise Storage 7.1
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-syms
SUSE:Enterprise Storage 7.1
From an advisory covering 67 CVEs
 before 5.3.18-150300.59.153.1
5.3.18-150300.59.153.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-livepatch-SLE15-SP2_Update_46
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 65 CVEs
 before 1-150200.5.3.2
1-150200.5.3.2
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP2
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1.150200.9.93.2
5.3.18-150200.24.183.1.150200.9.93.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-preempt
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-default
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1.150200.9.93.2
5.3.18-150200.24.183.1.150200.9.93.2
kernel-docs
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-preempt
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-source
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1.150200.9.93.2
5.3.18-150200.24.183.1.150200.9.93.2
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-preempt
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 65 CVEs
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
linux-aws-fips
Ubuntu:Pro:FIPS-updates:20.04:LTS
 All versions, plus listed versions
5.4.0-1021.21+fips25.4.0-1069.73+fips25.4.0-1071.76+fips15.4.0-1072.77+fips15.4.0-1073.78+fips1
Show 45 moreShow less
5.4.0-1078.84+fips15.4.0-1080.87+fips15.4.0-1081.88+fips15.4.0-1083.90+fips15.4.0-1085.92+fips15.4.0-1086.93+fips15.4.0-1088.96+fips15.4.0-1089.97+fips15.4.0-1092.100+fips15.4.0-1093.101+fips15.4.0-1094.102+fips15.4.0-1096.104+fips15.4.0-1099.107+fips15.4.0-1100.108+fips15.4.0-1101.109+fips15.4.0-1102.110+fips15.4.0-1103.111+fips15.4.0-1104.112+fips15.4.0-1105.113+fips15.4.0-1106.114+fips15.4.0-1107.115+fips15.4.0-1108.116+fips15.4.0-1109.118+fips15.4.0-1110.119+fips15.4.0-1111.120+fips15.4.0-1112.121+fips15.4.0-1113.123+fips15.4.0-1114.124+fips15.4.0-1116.126+fips15.4.0-1117.127+fips15.4.0-1118.128+fips15.4.0-1119.129+fips15.4.0-1120.130+fips15.4.0-1121.131+fips15.4.0-1122.132+fips15.4.0-1123.133+fips15.4.0-1124.134+fips15.4.0-1125.135+fips15.4.0-1126.136+fips25.4.0-1127.137+fips15.4.0-1128.138+fips15.4.0-1129.139+fips15.4.0-1130.140+fips15.4.0-1131.141+fips15.4.0-1132.142+fips1
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:20.04:LTS
 All versions, plus listed versions
5.4.0-1022.22+fips15.4.0-1073.76+fips15.4.0-1074.77+fips15.4.0-1076.79+fips15.4.0-1078.81+fips1
Show 45 moreShow less
5.4.0-1080.83+fips15.4.0-1083.87+fips15.4.0-1085.90+fips15.4.0-1086.91+fips15.4.0-1089.94+fips15.4.0-1090.95+fips15.4.0-1091.96+fips15.4.0-1094.100+fips15.4.0-1095.101+fips15.4.0-1098.104+fips15.4.0-1100.106+fips15.4.0-1101.107+fips15.4.0-1103.109+fips15.4.0-1104.110+fips15.4.0-1105.111+fips15.4.0-1106.112+fips15.4.0-1107.113+fips15.4.0-1108.114+fips15.4.0-1109.115+fips15.4.0-1110.116+fips15.4.0-1111.117+fips15.4.0-1112.118+fips15.4.0-1113.119+fips15.4.0-1114.120+fips15.4.0-1115.122+fips15.4.0-1116.123+fips15.4.0-1117.124+fips15.4.0-1118.125+fips15.4.0-1119.126+fips15.4.0-1121.128+fips15.4.0-1122.129+fips15.4.0-1123.130+fips15.4.0-1124.131+fips15.4.0-1126.133+fips15.4.0-1127.134+fips15.4.0-1128.135+fips15.4.0-1129.136+fips15.4.0-1130.137+fips15.4.0-1131.138+fips15.4.0-1132.139+fips15.4.0-1133.140+fips15.4.0-1134.141+fips15.4.0-1135.142+fips15.4.0-1136.143+fips15.4.0-1137.144+fips1
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:20.04:LTS
 All versions, plus listed versions
5.4.0-1021.21+fips15.4.0-1067.71~20.04.15.4.0-1069.73+fips25.4.0-1071.75+fips15.4.0-1073.78+fips1
Show 45 moreShow less
5.4.0-1075.80+fips15.4.0-1078.84+fips15.4.0-1080.87+fips15.4.0-1081.88+fips15.4.0-1086.94+fips15.4.0-1087.95+fips15.4.0-1089.97+fips15.4.0-1092.101+fips15.4.0-1093.102+fips15.4.0-1096.105+fips15.4.0-1097.106+fips15.4.0-1098.107+fips15.4.0-1100.109+fips15.4.0-1101.110+fips15.4.0-1102.111+fips15.4.0-1103.112+fips15.4.0-1104.113+fips15.4.0-1105.114+fips15.4.0-1106.115+fips15.4.0-1107.116+fips15.4.0-1108.117+fips15.4.0-1109.118+fips15.4.0-1110.119+fips15.4.0-1111.120+fips15.4.0-1112.121+fips15.4.0-1113.122+fips15.4.0-1115.124+fips15.4.0-1116.125+fips15.4.0-1117.126+fips15.4.0-1118.127+fips15.4.0-1120.129+fips15.4.0-1121.130+fips15.4.0-1122.131+fips15.4.0-1124.133+fips15.4.0-1125.134+fips15.4.0-1126.135+fips15.4.0-1127.136+fips15.4.0-1128.137+fips15.4.0-1129.138+fips15.4.0-1130.139+fips15.4.0-1131.140+fips15.4.0-1132.141+fips15.4.0-1133.142+fips15.4.0-1134.143+fips15.4.0-1135.144+fips1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
5.4.0-1021.21+fips2
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
5.4.0-1022.22+fips1
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
5.4.0-1021.21+fips1
 None known
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-raspi-realtime
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.0-2019.20
 None known

History

History
RecordedChangedSources
affectedOSV
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-47005 is a medium vulnerability (CVSS 5.5) in Linux, published February 28, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 14th percentile. Fixed in linux 5.10.38-1.

References

Show 150 moreShow less
This page doesn't list everything

Left out here: 89 versions and the rest of 3 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open