CVE-2021-47137

CriticalCVSS 9.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: lantiq: fix memory corruption in RX ring

In a situation where memory allocation or dma mapping fails, an invalid address is programmed into the descriptor. This can lead to memory corruption. If the memory allocation fails, DMA should reuse the previous skb and mapping and drop the packet. This patch also increments rx drop counter.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-770

Affected software

VendorProductVersions
LinuxLinux>= fe1a56420cf2ec28c8eceef672b87de0bbe1a260, < 8bb1077448d43a871ed667520763e3b9f9b7975d; >= fe1a56420cf2ec28c8eceef672b87de0bbe1a260, < 5ac72351655f8b033a2935646f53b7465c903418; >= fe1a56420cf2ec28c8eceef672b87de0bbe1a260, < 46dd4abced3cb2c912916f4a5353e0927db0c4a2; >= fe1a56420cf2ec28c8eceef672b87de0bbe1a260, < c7718ee96dbc2f9c5fc3b578abdf296dd44b9c20
LinuxLinux4.20
linuxlinux_kernel>= fe1a56420cf2, < 8bb1077448d4; >= fe1a56420cf2, < 5ac72351655f; >= fe1a56420cf2, < 46dd4abced3c; >= fe1a56420cf2, < c7718ee96dbc; 4.20; <= 4.20; >= 5.4.124, <= 5.4*; >= 5.10.42, <= 5.10*; >= 5.12.9, <= 5.12*; >= 5.13, <= *

References

Timeline

Published
Mar 25, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-471387.1In the Linux kernel, the following vulnerability has been resolved: cxgb4: avoid accessing registers when clearing filters Hardware registCVE-2021-471395.5In the Linux kernel, the following vulnerability has been resolved: net: hns3: put off calling register_netdev() until client initialize coCVE-2021-471405.3In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Clear DMA ops when switching domain Since commit 08a27c1c3eCVE-2021-471415.5In the Linux kernel, the following vulnerability has been resolved: gve: Add NULL pointer checks when freeing irqs. When freeing notificatCVE-2021-471425.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix a use-after-free looks like we forget to set ttm->sg tCVE-2021-471435.5In the Linux kernel, the following vulnerability has been resolved: net/smc: remove device from smcd_dev_list after failed device_add() IfCVE-2021-471455.5In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUG_ON in link_to_fixup_dir While doing error injection CVE-2021-471465.5In the Linux kernel, the following vulnerability has been resolved: mld: fix panic in mld_newpack() mld_newpack() doesn't allow to allocatCVE-2021-471476.2In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix a resource leak in an error handling path If an error ocCVE-2021-471487.8In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix a buffer overflow in otx2_set_rxfh_context() This fuCVE-2021-471495.5In the Linux kernel, the following vulnerability has been resolved: net: fujitsu: fix potential null-ptr-deref In fmvj18x_get_hwinfo(), ifCVE-2021-471505.5In the Linux kernel, the following vulnerability has been resolved: net: fec: fix the potential memory leak in fec_enet_init() If the memo
CVE-2021-47137: Critical severity, CVSS 9.8 | Vulnix