Critical severity · published Mar 25, 2024
CVE-2021-47137
net: lantiq: fix memory corruption in RX ring
9.8
CVSS
0.6%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
net: lantiq: fix memory corruption in RX ring
In a situation where memory allocation or dma mapping fails, an
invalid address is programmed into the descriptor. This can lead
to memory corruption. If the memory allocation fails, DMA should
reuse the previous skb and mapping and drop the packet. This patch
also increments rx drop counter.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
4.20 before 5.4.124; 5.5 before 5.10.42; 5.11 before 5.12.9; 5.13; 5.13; 5.13 · source: NVD, CISA
LI
Linux · Linux
fe1a56420cf2ec28c8eceef672b87de0bbe1a260 before 8bb1077448d43a871ed667520763e3b9f9b7975d; fe1a56420cf2ec28c8eceef672b87de0bbe1a260 before 5ac72351655f8b033a2935646f53b7465c903418; fe1a56420cf2ec28c8eceef672b87de0bbe1a260 before 46dd4abced3cb2c912916f4a5353e0927db0c4a2; fe1a56420cf2ec28c8eceef672b87de0bbe1a260 before c7718ee96dbc2f9c5fc3b578abdf296dd44b9c20; 4.20 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-47137
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-47137
Patch
https://git.kernel.org/stable/c/46dd4abced3cb2c912916f4a5353e0927db0c4a2
Patch
https://git.kernel.org/stable/c/5ac72351655f8b033a2935646f53b7465c903418
Patch
https://git.kernel.org/stable/c/8bb1077448d43a871ed667520763e3b9f9b7975d
Patch
https://git.kernel.org/stable/c/c7718ee96dbc2f9c5fc3b578abdf296dd44b9c20
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability