CVE-2021-47159
published 2024-03-25CVE-2021-47159: In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix a crash if ->get_sset_count() fails If ds->ops->get_sset_count() fails then…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.24%
15.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: fix a crash if ->get_sset_count() fails
If ds->ops->get_sset_count() fails then it "count" is a negative error
code such as -EOPNOTSUPP. Because "i" is an unsigned int, the negative
error code is type promoted to a very high value and the loop will
corrupt memory until the system crashes.
Fix this by checking for error codes and changing the type of "i" to
just int.
Affected
18 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.14.6-1 (bookworm) | linux 5.14.6-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= badf3ada60ab8f76f9488dc8f5c0c57f70682f5a < 0f2cb08c57edefb0e7b5045e0e3e9980a3d3aa37 | 0f2cb08c57edefb0e7b5045e0e3e9980a3d3aa37 |
| linux | linux | >= badf3ada60ab8f76f9488dc8f5c0c57f70682f5a < ce5355f140a7987011388c7e30c4f8fbe180d3e8 | ce5355f140a7987011388c7e30c4f8fbe180d3e8 |
| linux | linux | >= badf3ada60ab8f76f9488dc8f5c0c57f70682f5a < caff86f85512b8e0d9830e8b8b0dfe13c68ce5b6 | caff86f85512b8e0d9830e8b8b0dfe13c68ce5b6 |
| linux | linux | >= badf3ada60ab8f76f9488dc8f5c0c57f70682f5a < 7b22466648a4f8e3e94f57ca428d1531866d1373 | 7b22466648a4f8e3e94f57ca428d1531866d1373 |
| linux | linux | >= badf3ada60ab8f76f9488dc8f5c0c57f70682f5a < a269333fa5c0c8e53c92b5a28a6076a28cde3e83 | a269333fa5c0c8e53c92b5a28a6076a28cde3e83 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 4.20 < 5.4.124 | 5.4.124 |
| linux | linux_kernel | >= 4.7 < 4.19.193 | 4.19.193 |
| linux | linux_kernel | >= 5.11 < 5.12.9 | 5.12.9 |
| linux | linux_kernel | >= 5.5 < 5.10.42 | 5.10.42 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 5.12.8 dsa get_sset_count data authenticity (WID-SEC-2024-0699)
vuldb·2026-08-05·CVSS 5.5
CVE-2021-47159 [MEDIUM] Linux Kernel up to 5.12.8 dsa get_sset_count data authenticity (WID-SEC-2024-0699)
A vulnerability was found in Linux Kernel up to 5.12.8. It has been classified as critical. Affected by this vulnerability is the function get_sset_count of the component dsa. Performing a manipulation results in insufficient verification of data authenticity.
This vulnerability is cataloged as CVE-2021-47159. The attack must originate from the local network. There is no exploit available.
Upgrading the affected component is recommended.
GHSA
GHSA-5c7w-v73j-6cr4: In the Linux kernel, the following vulnerability has been resolved:
net: dsa: fix a crash if ->get_sset_count() fails
If ds->ops->get_sset_count() f
ghsa_unreviewed·2024-03-25
CVE-2021-47159 [MEDIUM] CWE-835 GHSA-5c7w-v73j-6cr4: In the Linux kernel, the following vulnerability has been resolved:
net: dsa: fix a crash if ->get_sset_count() fails
If ds->ops->get_sset_count() f
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: fix a crash if ->get_sset_count() fails
If ds->ops->get_sset_count() fails then it "count" is a negative error
code such as -EOPNOTSUPP. Because "i" is an unsigned int, the negative
error code is type promoted to a very high value and the loop will
corrupt memory until the system crashes.
Fix this by checking for error codes and changing the type of "i" to
just int.
OSV
CVE-2021-47159: In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix a crash if ->get_sset_count() fails If ds->ops->get_sset_count() fai
osv·2024-03-25·CVSS 5.5
CVE-2021-47159 [MEDIUM] CVE-2021-47159: In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix a crash if ->get_sset_count() fails If ds->ops->get_sset_count() fai
In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix a crash if ->get_sset_count() fails If ds->ops->get_sset_count() fails then it "count" is a negative error code such as -EOPNOTSUPP. Because "i" is an unsigned int, the negative error code is type promoted to a very high value and the loop will corrupt memory until the system crashes. Fix this by checking for error codes and changing the type of "i" to just int.
Red Hat
kernel: net: dsa: fix a crash if ->get_sset_count() fails
vendor_redhat·2024-03-25·CVSS 5.5
CVE-2021-47159 [MEDIUM] CWE-704 kernel: net: dsa: fix a crash if ->get_sset_count() fails
kernel: net: dsa: fix a crash if ->get_sset_count() fails
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: fix a crash if ->get_sset_count() fails
If ds->ops->get_sset_count() fails then it "count" is a negative error
code such as -EOPNOTSUPP. Because "i" is an unsigned int, the negative
error code is type promoted to a very high value and the loop will
corrupt memory until the system crashes.
Fix this by checking for error codes and changing the type of "i" to
just int.
A vulnerability was discovered in the Linux kernel's DSA (Distributed Switch Architecture) module, specifically when handling failures in the get_sset_count() function pointer. If this function fails, causing an error code like -EOPNOTSUPP, it results in an unsigned int variable 'i' being typ
Debian
CVE-2021-47159: linux - In the Linux kernel, the following vulnerability has been resolved: net: dsa: f...
vendor_debian·2021·CVSS 5.5
CVE-2021-47159 [MEDIUM] CVE-2021-47159: linux - In the Linux kernel, the following vulnerability has been resolved: net: dsa: f...
In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix a crash if ->get_sset_count() fails If ds->ops->get_sset_count() fails then it "count" is a negative error code such as -EOPNOTSUPP. Because "i" is an unsigned int, the negative error code is type promoted to a very high value and the loop will corrupt memory until the system crashes. Fix this by checking for error codes and changing the type of "i" to just int.
Scope: local
bookworm: resolved (fixed in 5.14.6-1)
bullseye: resolved (fixed in 5.10.46-1)
forky: resolved (fixed in 5.14.6-1)
sid: resolved (fixed in 5.14.6-1)
trixie: resolved (fixed in 5.14.6-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0f2cb08c57edefb0e7b5045e0e3e9980a3d3aa37https://git.kernel.org/stable/c/7b22466648a4f8e3e94f57ca428d1531866d1373https://git.kernel.org/stable/c/a269333fa5c0c8e53c92b5a28a6076a28cde3e83https://git.kernel.org/stable/c/caff86f85512b8e0d9830e8b8b0dfe13c68ce5b6https://git.kernel.org/stable/c/ce5355f140a7987011388c7e30c4f8fbe180d3e8https://git.kernel.org/stable/c/0f2cb08c57edefb0e7b5045e0e3e9980a3d3aa37https://git.kernel.org/stable/c/7b22466648a4f8e3e94f57ca428d1531866d1373https://git.kernel.org/stable/c/a269333fa5c0c8e53c92b5a28a6076a28cde3e83https://git.kernel.org/stable/c/caff86f85512b8e0d9830e8b8b0dfe13c68ce5b6https://git.kernel.org/stable/c/ce5355f140a7987011388c7e30c4f8fbe180d3e8
2024-03-25
Published