CVE-2021-47006

ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook

State: Published
Severity: 5.5 Medium
Published: Feb 28, 2024
Updated: May 11, 2026
Reserved: Feb 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook

The commit 1879445dfa7b ("perf/core: Set event's default ::overflow_handler()") set a default event->overflow_handler in perf_event_alloc(), and replace the check event->overflow_handler with is_default_overflow_handler(), but one is missing.

Currently, the bp->overflow_handler can not be NULL. As a result, enable_single_step() is always not invoked.

Comments from Zhen Lei:

https://patchwork.kernel.org/project/linux-arm-kernel/patch/20210207105934.2001-1-thunder.leizhen@huawei.com/

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1879445dfa7bbd6fe21b09c5cc72f4934798afed to before 555a70f7fff03bd669123487905c47ae27dbdaacAffected 1879445dfa7bbd6fe21b09c5cc72f4934798afed to before ed1f67465327cec4457bb988775245b199da86e6Affected 1879445dfa7bbd6fe21b09c5cc72f4934798afed to before a9938d6d78a238d6ab8de57a4d3dcf77adceb9bbAffected 1879445dfa7bbd6fe21b09c5cc72f4934798afed to before 3ed8832aeaa9a37b0fc386bb72ff604352567c80Affected 1879445dfa7bbd6fe21b09c5cc72f4934798afed to before 630146203108bf6b8934eec0dfdb3e46dcb917deAffected 1879445dfa7bbd6fe21b09c5cc72f4934798afed to before 7eeacc6728c5478e3c01bc82a1f08958eaa12366Affected 1879445dfa7bbd6fe21b09c5cc72f4934798afed to before dabe299425b1a53a69461fed7ac8922ea6733a25Affected 1879445dfa7bbd6fe21b09c5cc72f4934798afed to before a506bd5756290821a4314f502b4bafc2afcf5260Affected
LinuxLinux	4.7Affected before 4.7Not affected 4.9.269 through 4.9.Not affected 4.14.233 through 4.14.Not affected 4.19.191 through 4.19.Not affected 5.4.120 through 5.4.Not affected 5.10.38 through 5.10.Not affected 5.11.22 through 5.11.Not affected 5.12.5 through 5.12.*Not affected 5.13 and laterNot affected

Product

Versions

LinuxLinux

1879445dfa7bbd6fe21b09c5cc72f4934798afed to before 555a70f7fff03bd669123487905c47ae27dbdaacAffected
1879445dfa7bbd6fe21b09c5cc72f4934798afed to before ed1f67465327cec4457bb988775245b199da86e6Affected
1879445dfa7bbd6fe21b09c5cc72f4934798afed to before a9938d6d78a238d6ab8de57a4d3dcf77adceb9bbAffected
1879445dfa7bbd6fe21b09c5cc72f4934798afed to before 3ed8832aeaa9a37b0fc386bb72ff604352567c80Affected
1879445dfa7bbd6fe21b09c5cc72f4934798afed to before 630146203108bf6b8934eec0dfdb3e46dcb917deAffected
1879445dfa7bbd6fe21b09c5cc72f4934798afed to before 7eeacc6728c5478e3c01bc82a1f08958eaa12366Affected
1879445dfa7bbd6fe21b09c5cc72f4934798afed to before dabe299425b1a53a69461fed7ac8922ea6733a25Affected
1879445dfa7bbd6fe21b09c5cc72f4934798afed to before a506bd5756290821a4314f502b4bafc2afcf5260Affected

LinuxLinux

4.7Affected
before 4.7Not affected
4.9.269 through 4.9.*Not affected
4.14.233 through 4.14.*Not affected
4.19.191 through 4.19.*Not affected
5.4.120 through 5.4.*Not affected
5.10.38 through 5.10.*Not affected
5.11.22 through 5.11.*Not affected
5.12.5 through 5.12.*Not affected
5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.