CVE-2021-47373
Linux Kernel GIC-V3-ITS VPE Leak
Description
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Fix potential VPE leak on error In its_vpe_irq_domain_alloc, when its_vpe_init() returns an error, there is an off-by-one in the number of VPEs to be freed. Fix it by simply passing the number of VPEs allocated, which is the index of the loop iterating over the VPEs. [maz: fixed commit message]
INFO
Published Date :
May 21, 2024, 3:15 p.m.
Last Modified :
Dec. 26, 2024, 5:57 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2021-47373.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2021-47373 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2021-47373 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Dec. 26, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE NIST CWE-193 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.14 up to (excluding) 4.14.249 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.15 up to (excluding) 4.19.209 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.150 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.70 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.14.9 *cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:* Changed Reference Type https://git.kernel.org/stable/c/280bef512933b2dda01d681d8cbe499b98fc5bdd No Types Assigned https://git.kernel.org/stable/c/280bef512933b2dda01d681d8cbe499b98fc5bdd Patch Changed Reference Type https://git.kernel.org/stable/c/280bef512933b2dda01d681d8cbe499b98fc5bdd No Types Assigned https://git.kernel.org/stable/c/280bef512933b2dda01d681d8cbe499b98fc5bdd Patch Changed Reference Type https://git.kernel.org/stable/c/42d3711c23781045e7a5cd28536c774b9a66d20b No Types Assigned https://git.kernel.org/stable/c/42d3711c23781045e7a5cd28536c774b9a66d20b Patch Changed Reference Type https://git.kernel.org/stable/c/42d3711c23781045e7a5cd28536c774b9a66d20b No Types Assigned https://git.kernel.org/stable/c/42d3711c23781045e7a5cd28536c774b9a66d20b Patch Changed Reference Type https://git.kernel.org/stable/c/568662e37f927e3dc3e475f3ff7cf4ab7719c5e7 No Types Assigned https://git.kernel.org/stable/c/568662e37f927e3dc3e475f3ff7cf4ab7719c5e7 Patch Changed Reference Type https://git.kernel.org/stable/c/568662e37f927e3dc3e475f3ff7cf4ab7719c5e7 No Types Assigned https://git.kernel.org/stable/c/568662e37f927e3dc3e475f3ff7cf4ab7719c5e7 Patch Changed Reference Type https://git.kernel.org/stable/c/5701e8bff314c155e7afdc467b1e0389d86853d0 No Types Assigned https://git.kernel.org/stable/c/5701e8bff314c155e7afdc467b1e0389d86853d0 Patch Changed Reference Type https://git.kernel.org/stable/c/5701e8bff314c155e7afdc467b1e0389d86853d0 No Types Assigned https://git.kernel.org/stable/c/5701e8bff314c155e7afdc467b1e0389d86853d0 Patch Changed Reference Type https://git.kernel.org/stable/c/7d39992d45acd6f2d6b2f62389c55b61fb3d486b No Types Assigned https://git.kernel.org/stable/c/7d39992d45acd6f2d6b2f62389c55b61fb3d486b Patch Changed Reference Type https://git.kernel.org/stable/c/7d39992d45acd6f2d6b2f62389c55b61fb3d486b No Types Assigned https://git.kernel.org/stable/c/7d39992d45acd6f2d6b2f62389c55b61fb3d486b Patch Changed Reference Type https://git.kernel.org/stable/c/e0c1c2e5da19685a20557a50f10c6aa4fa26aa84 No Types Assigned https://git.kernel.org/stable/c/e0c1c2e5da19685a20557a50f10c6aa4fa26aa84 Patch Changed Reference Type https://git.kernel.org/stable/c/e0c1c2e5da19685a20557a50f10c6aa4fa26aa84 No Types Assigned https://git.kernel.org/stable/c/e0c1c2e5da19685a20557a50f10c6aa4fa26aa84 Patch -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/280bef512933b2dda01d681d8cbe499b98fc5bdd Added Reference https://git.kernel.org/stable/c/42d3711c23781045e7a5cd28536c774b9a66d20b Added Reference https://git.kernel.org/stable/c/568662e37f927e3dc3e475f3ff7cf4ab7719c5e7 Added Reference https://git.kernel.org/stable/c/5701e8bff314c155e7afdc467b1e0389d86853d0 Added Reference https://git.kernel.org/stable/c/7d39992d45acd6f2d6b2f62389c55b61fb3d486b Added Reference https://git.kernel.org/stable/c/e0c1c2e5da19685a20557a50f10c6aa4fa26aa84 -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 28, 2024
Action Type Old Value New Value -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 21, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Fix potential VPE leak on error In its_vpe_irq_domain_alloc, when its_vpe_init() returns an error, there is an off-by-one in the number of VPEs to be freed. Fix it by simply passing the number of VPEs allocated, which is the index of the loop iterating over the VPEs. [maz: fixed commit message] Added Reference kernel.org https://git.kernel.org/stable/c/7d39992d45acd6f2d6b2f62389c55b61fb3d486b [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/5701e8bff314c155e7afdc467b1e0389d86853d0 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/42d3711c23781045e7a5cd28536c774b9a66d20b [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/568662e37f927e3dc3e475f3ff7cf4ab7719c5e7 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/e0c1c2e5da19685a20557a50f10c6aa4fa26aa84 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/280bef512933b2dda01d681d8cbe499b98fc5bdd [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2021-47373 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2021-47373
weaknesses.