Skip to content
9.8 Critical

CVE-2021-47137 In the Linux kernel, the following vulnerability has been resolved: net: lantiq: fix memory corruption in RX ring In a…

Description

In the Linux kernel, the following vulnerability has been resolved: net: lantiq: fix memory corruption in RX ring In a situation where memory allocation or dma mapping fails, an invalid address is programmed into the descriptor. This can lead to memory corruption. If the memory allocation fails, DMA should reuse the previous skb and mapping and drop the packet. This patch also increments rx drop counter.

Affected products and versions

Product Affected versions Fixed in
Linux 5.13 earliest → < 5.13 5.13
Linux 5.12 earliest → < 5.12.9 5.12.9
Linux 5.10 earliest → < 5.10.42 5.10.42
Linux 5.4 earliest → < 5.4.124 5.4.124
Linux 4.20 No fix stated
linux_kernel 5.13 5.13 → latest No fix stated
linux_kernel 5.12 5.12.9 → latest No fix stated
linux_kernel 5.10 5.10.42 → latest No fix stated
linux_kernel 5.4 5.4.124 → latest No fix stated
Show the other branch
Product Affected versions Fixed in
linux_kernel 4.20 earliest → 4.20 No fix stated

References

Timeline

  1. Published
  2. Last modified
The 18283 CVEs of Linux →
Track this CVE