CVE-2021-47276

ftrace: Do not blindly read the ip address in ftrace_bug()

State: Published
Severity: Not scored
Published: May 21, 2024
Updated: May 11, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ftrace: Do not blindly read the ip address in ftrace_bug()

It was reported that a bug on arm64 caused a bad ip address to be used for updating into a nop in ftrace_init(), but the error path (rightfully) returned -EINVAL and not -EFAULT, as the bug caused more than one error to occur. But because -EINVAL was returned, the ftrace_bug() tried to report what was at the location of the ip address, and read it directly. This caused the machine to panic, as the ip was not pointing to a valid memory address.

Instead, read the ip address with copy_from_kernel_nofault() to safely access the memory, and if it faults, report that the address faulted, otherwise report what was in that location.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	05736a427f7e16be948ccbf39782bd3a6ae16b14 to before 0bc62e398bbd9e600959e610def5109957437b28Affected 05736a427f7e16be948ccbf39782bd3a6ae16b14 to before 4aedc2bc2b32c93555f47c95610efb89cc1ec09bAffected 05736a427f7e16be948ccbf39782bd3a6ae16b14 to before acf671ba79c1feccc3ec7cfdcffead4efcec49e7Affected 05736a427f7e16be948ccbf39782bd3a6ae16b14 to before 862dcc14f2803c556bdd73b43c27b023fafce2fbAffected 05736a427f7e16be948ccbf39782bd3a6ae16b14 to before 7e4e824b109f1d41ccf223fbb0565d877d6223a2Affected 05736a427f7e16be948ccbf39782bd3a6ae16b14 to before 97524384762c1fb9b3ded931498dd2047bd0de81Affected 05736a427f7e16be948ccbf39782bd3a6ae16b14 to before 3e4ddeb68751fb4fb657199aed9cfd5d02796875Affected 05736a427f7e16be948ccbf39782bd3a6ae16b14 to before 6c14133d2d3f768e0a35128faac8aa6ed4815051Affected
LinuxLinux	2.6.28Affected before 2.6.28Not affected 4.4.273 through 4.4.Not affected 4.9.273 through 4.9.Not affected 4.14.237 through 4.14.Not affected 4.19.195 through 4.19.Not affected 5.4.126 through 5.4.Not affected 5.10.44 through 5.10.Not affected 5.12.11 through 5.12.*Not affected 5.13 and laterNot affected

Product

Versions

LinuxLinux

05736a427f7e16be948ccbf39782bd3a6ae16b14 to before 0bc62e398bbd9e600959e610def5109957437b28Affected
05736a427f7e16be948ccbf39782bd3a6ae16b14 to before 4aedc2bc2b32c93555f47c95610efb89cc1ec09bAffected
05736a427f7e16be948ccbf39782bd3a6ae16b14 to before acf671ba79c1feccc3ec7cfdcffead4efcec49e7Affected
05736a427f7e16be948ccbf39782bd3a6ae16b14 to before 862dcc14f2803c556bdd73b43c27b023fafce2fbAffected
05736a427f7e16be948ccbf39782bd3a6ae16b14 to before 7e4e824b109f1d41ccf223fbb0565d877d6223a2Affected
05736a427f7e16be948ccbf39782bd3a6ae16b14 to before 97524384762c1fb9b3ded931498dd2047bd0de81Affected
05736a427f7e16be948ccbf39782bd3a6ae16b14 to before 3e4ddeb68751fb4fb657199aed9cfd5d02796875Affected
05736a427f7e16be948ccbf39782bd3a6ae16b14 to before 6c14133d2d3f768e0a35128faac8aa6ed4815051Affected

LinuxLinux

2.6.28Affected
before 2.6.28Not affected
4.4.273 through 4.4.*Not affected
4.9.273 through 4.9.*Not affected
4.14.237 through 4.14.*Not affected
4.19.195 through 4.19.*Not affected
5.4.126 through 5.4.*Not affected
5.10.44 through 5.10.*Not affected
5.12.11 through 5.12.*Not affected
5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.