CVE-2021-47086

phonet/pep: refuse to enable an unbound pipe

State: Published
Severity: Not scored
Published: Mar 4, 2024
Updated: May 11, 2026
Reserved: Feb 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

phonet/pep: refuse to enable an unbound pipe

This ioctl() implicitly assumed that the socket was already bound to a valid local socket name, i.e. Phonet object. If the socket was not bound, two separate problems would occur:

1) We'd send an pipe enablement request with an invalid source object. 2) Later socket calls could BUG on the socket unexpectedly being connected yet not bound to a valid object.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to before 0bbdd62ce9d44f3a22059b3d20a0df977d9f6d59Affected bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to before b10c7d745615a092a50c2e03ce70446d2bec2acaAffected bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to before 311601f114859d586d5ef8833d60d3aa23282161Affected bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to before 982b6ba1ce626ef87e5c29f26f2401897554f235Affected bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to before 48c76fc53582e7f13c1e0b11c916e503256c4d0bAffected bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to before 52ad5da8e316fa11e3a50b3f089aa63e4089bf52Affected bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to before 53ccdc73eedaf0e922c45b569b797d2796fbaafaAffected bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to before 75a2f31520095600f650597c0ac41f48b5ba0068Affected
LinuxLinux	3.3Affected before 3.3Not affected 4.4.297 through 4.4.Not affected 4.9.295 through 4.9.Not affected 4.14.260 through 4.14.Not affected 4.19.223 through 4.19.Not affected 5.4.169 through 5.4.Not affected 5.10.89 through 5.10.Not affected 5.15.12 through 5.15.*Not affected 5.16 and laterNot affected

Product

Versions

LinuxLinux

bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to before 0bbdd62ce9d44f3a22059b3d20a0df977d9f6d59Affected
bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to before b10c7d745615a092a50c2e03ce70446d2bec2acaAffected
bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to before 311601f114859d586d5ef8833d60d3aa23282161Affected
bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to before 982b6ba1ce626ef87e5c29f26f2401897554f235Affected
bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to before 48c76fc53582e7f13c1e0b11c916e503256c4d0bAffected
bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to before 52ad5da8e316fa11e3a50b3f089aa63e4089bf52Affected
bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to before 53ccdc73eedaf0e922c45b569b797d2796fbaafaAffected
bdb6e697b2a76c541960b86ab8fda88f3de1adf2 to before 75a2f31520095600f650597c0ac41f48b5ba0068Affected

LinuxLinux

3.3Affected
before 3.3Not affected
4.4.297 through 4.4.*Not affected
4.9.295 through 4.9.*Not affected
4.14.260 through 4.14.*Not affected
4.19.223 through 4.19.*Not affected
5.4.169 through 5.4.*Not affected
5.10.89 through 5.10.*Not affected
5.15.12 through 5.15.*Not affected
5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.