cbcvebase.
CVE-2021-47016
published 2024-02-29

CVE-2021-47016: In the Linux kernel, the following vulnerability has been resolved: m68k: mvme147,mvme16x: Don't wipe PCC timer config bits Don't clear the timer 1…

PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
12.8th percentile
In the Linux kernel, the following vulnerability has been resolved: m68k: mvme147,mvme16x: Don't wipe PCC timer config bits Don't clear the timer 1 configuration bits when clearing the interrupt flag and counter overflow. As Michael reported, "This results in no timer interrupts being delivered after the first. Initialization then hangs in calibrate_delay as the jiffies counter is not updated." On mvme16x, enable the timer after requesting the irq, consistent with mvme147.

Affected

15 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.10.38-1 (bookworm)linux 5.10.38-1 (bookworm)
linuxlinux——
linuxlinux>= 7529b90d051e4629884771ba2b1d3a87d2c6a9d7 < f6a90818a32058fca62cda3a2027a6a2364e1878f6a90818a32058fca62cda3a2027a6a2364e1878
linuxlinux>= 7529b90d051e4629884771ba2b1d3a87d2c6a9d7 < 1dfb26df15fc7036a74221d43de7427f74293dae1dfb26df15fc7036a74221d43de7427f74293dae
linuxlinux>= 7529b90d051e4629884771ba2b1d3a87d2c6a9d7 < 73fdeb612d25b5e105c219e05434285a45d2357673fdeb612d25b5e105c219e05434285a45d23576
linuxlinux>= 7529b90d051e4629884771ba2b1d3a87d2c6a9d7 < 5d34225169346cab5145978d153b9ce90e9ace215d34225169346cab5145978d153b9ce90e9ace21
linuxlinux>= 7529b90d051e4629884771ba2b1d3a87d2c6a9d7 < 43262178c043032e7c42d00de44c818ba05f996743262178c043032e7c42d00de44c818ba05f9967
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 5.11 < 5.11.215.11.21
linuxlinux_kernel>= 5.12 < 5.12.45.12.4
linuxlinux_kernel>= 5.2 < 5.4.1195.4.119
linuxlinux_kernel>= 5.5 < 5.10.375.10.37

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.