CVE-2021-47087

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

tee: optee: Fix incorrect page free bug

Pointer to the allocated pages (struct page *page) has already progressed towards the end of allocation. It is incorrect to perform __free_pages(page, order) using this pointer as we would free any arbitrary pages. Fix this by stop modifying the page pointer.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-763

Affected software

VendorProductVersions
LinuxLinux>= 3c712f14d8a9354a8807c15c64c8dd334499cc42, < 806142c805cacd098e61bdc0f72c778a2389fe4a; >= 1340dc3fb75ea69221f4f5dcb0cbace55ad0331c, < ad338d825e3f7b96ee542bf313728af2d19fe9ad; >= ec185dd3ab257dc2a60953fdf1b6622f524cc5b7, < 91e94e42f6fc49635f1a16d8ae3f79552bcfda29; >= ec185dd3ab257dc2a60953fdf1b6622f524cc5b7, < 18549bf4b21c739a9def39f27dcac53e27286ab5; 255e17923b22cb7abd026e044416d61f6bd0eec0; >= 5.4.140, < 5.4.169; >= 5.10.58, < 5.10.89; >= 5.13.10, < 5.14
LinuxLinux5.14

References

Timeline

Published
Mar 4, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-470887.0In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: protect targets destructions with kdamond_lock DAMON dCVE-2021-470893.3In the Linux kernel, the following vulnerability has been resolved: kfence: fix memory leak when cat kfence objects Hulk robot reported a CVE-2021-470905.5In the Linux kernel, the following vulnerability has been resolved: mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page() HCVE-2021-470915.5In the Linux kernel, the following vulnerability has been resolved: mac80211: fix locking in ieee80211_start_ap error path We need to holdCVE-2021-470925.5In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Always clear vmx->fail on emulation_required Revert a relatiCVE-2021-470935.5In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel_pmc_core: fix memleak on registration failure In cCVE-2021-470947.8In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Don't advance iterator after restart due to yielding AftCVE-2021-470955.5In the Linux kernel, the following vulnerability has been resolved: ipmi: ssif: initialize ssif_info->client early During probe ssif_info-CVE-2021-470964.0In the Linux kernel, the following vulnerability has been resolved: ALSA: rawmidi - fix the uninitalized user_pversion The user_pversion wCVE-2021-470977.1In the Linux kernel, the following vulnerability has been resolved: Input: elantech - fix stack out of bound access in elantech_change_repoCVE-2021-470987.8In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculatCVE-2021-470997.8In the Linux kernel, the following vulnerability has been resolved: veth: ensure skb entering GRO are not cloned. After commit d3256efd8e8
CVE-2021-47087: High severity, CVSS 7.8 | Vulnix