CVE-2021-47368

enetc: Fix illegal access when reading affinity_hint

State
Published
Severity
7.1 High
Published
May 21, 2024
Updated
Aug 5, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

enetc: Fix illegal access when reading affinity_hint

irq_set_affinity_hit() stores a reference to the cpumask_t parameter in the irq descriptor, and that reference can be accessed later from irq_affinity_hint_proc_show(). Since the cpu_mask parameter passed to irq_set_affinity_hit() has only temporary storage (it's on the stack memory), later accesses to it are illegal. Thus reads from the corresponding procfs affinity_hint file can result in paging request oops.

The issue is fixed by the get_cpu_mask() helper, which provides a permanent storage for the cpumask_t parameter.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HLinux
3.18.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HCISA-ADP

Weaknesses

  • CWE-400 Uncontrolled Resource Consumption

Affected Products

ProductVersions
LinuxLinux
  • d4fd0404c1c95b17880f254ebfee3485693fa8ba to before 4c4c3052911b577920353a7646e4883d5da40c28Affected
  • d4fd0404c1c95b17880f254ebfee3485693fa8ba to before 6c3f1b741c6c2914ea120e3a5790d3e900152f7bAffected
  • d4fd0404c1c95b17880f254ebfee3485693fa8ba to before 6f329d9da2a5ae032fcde800a99b118124ed5270Affected
  • d4fd0404c1c95b17880f254ebfee3485693fa8ba to before 7237a494decfa17d0b9d0076e6cee3235719de90Affected
LinuxLinux
  • 5.1Affected
  • before 5.1Not affected
  • 5.4.150 through 5.4.*Not affected
  • 5.10.70 through 5.10.*Not affected
  • 5.14.9 through 5.14.*Not affected
  • 5.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.