CVE-2021-47354
Vulnerability Summary
Timeline
Description
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Avoid data corruptions Wait for all dependencies of a job to complete before killing it to avoid data corruptions.
CVSS Metrics
- v4.0•MEDIUM•Score: 6.9CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
- v3.1•HIGH•Score: 7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
EPSS Trends
Current EPSS score: 0.73%• Percentile: 53%
Techniques & Countermeasures
- CWE-787•Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Affected Systems
- debian•linux
< 5.10.70-1 | < 5.14.6-1 | < 5.14.6-1 | < 5.14.6-1
- ubuntu•linux
all | < 4.15.0-254.266 | < 5.4.0-84.94
- ubuntu•linux-allwinner-5.19
all
- ubuntu•linux-aws
all | < 4.15.0-1195.208 | < 5.4.0-1056.59
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
all
- ubuntu•linux-aws-5.13
all
- ubuntu•linux-aws-5.19
all
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.4
< 5.4.0-1056.59~18.04.1
- ubuntu•linux-aws-5.8
all
- ubuntu•linux-aws-6.2
all
- ubuntu•linux-aws-fips
< 4.15.0-2133.139 | all | < 5.4.0-1069.73+fips2
- ubuntu•linux-aws-hwe
all | < 4.15.0-1195.208~16.04.1
- ubuntu•linux-azure
all | < 4.15.0-1205.220~14.04.1 | < 4.15.0-1205.220~16.04.1 | all | < 5.4.0-1058.60
- ubuntu•linux-azure-4.15
< 4.15.0-1205.220
- ubuntu•linux-azure-5.11
all
- ubuntu•linux-azure-5.13
all
- ubuntu•linux-azure-5.19
all
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.4
< 5.4.0-1058.60~18.04.1
- ubuntu•linux-azure-5.8
all
- ubuntu•linux-azure-6.2
all
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
all
- ubuntu•linux-azure-fde-5.19
all
- ubuntu•linux-azure-fde-6.2
all
- ubuntu•linux-azure-fips
< 4.15.0-2113.119 | all | < 5.4.0-1073.76+fips1
- ubuntu•linux-bluefield
all | < 5.4.0-1019.22
- ubuntu•linux-fips
all | < 4.15.0-1150.162 | < 5.4.0-1033.38
- ubuntu•linux-gcp
all | < 4.15.0-1188.205~16.04.1 | all | < 5.4.0-1052.56
- ubuntu•linux-gcp-4.15
< 4.15.0-1188.205
- ubuntu•linux-gcp-5.11
all
- ubuntu•linux-gcp-5.13
all
- ubuntu•linux-gcp-5.19
all
- ubuntu•linux-gcp-5.3
all
- ubuntu•linux-gcp-5.4
< 5.4.0-1052.56~18.04.1
- ubuntu•linux-gcp-5.8
all
- ubuntu•linux-gcp-6.2
all
- ubuntu•linux-gcp-fips
< 4.15.0-2096.102 | all | < 5.4.0-1067.71~20.04.1
- ubuntu•linux-gke
all
- ubuntu•linux-gke-4.15
all
- ubuntu•linux-gke-5.15
all
- ubuntu•linux-gke-5.4
all
- ubuntu•linux-gkeop
< 5.4.0-1023.24
- ubuntu•linux-gkeop-5.4
all
- ubuntu•linux-hwe
all | < 4.15.0-254.266~16.04.1 | all
- ubuntu•linux-hwe-5.11
all
- ubuntu•linux-hwe-5.13
all
- ubuntu•linux-hwe-5.19
all
Showing first 50 affected entries in server-rendered view.
References (13)
- https://git.kernel.org/stable/c/c32d0f0e164ffab2a56c7cf8e612584b4b740e2e
- https://git.kernel.org/stable/c/0687411e2a8858262de2fc4a1d576016fd77292e
- https://git.kernel.org/stable/c/a8e23e3c1ff9ec598ab1b3a941ace6045027781f
- https://git.kernel.org/stable/c/50d7e03ad487cc45fc85164a299b945a41756ac0
- https://git.kernel.org/stable/c/0b10ab80695d61422337ede6ff496552d8ace99d
- https://ubuntu.com/security/CVE-2021-47354
- https://www.cve.org/CVERecord?id=CVE-2021-47354
- https://git.kernel.org/linus/0b10ab80695d61422337ede6ff496552d8ace99d
- https://ubuntu.com/security/notices/USN-8633-1
- https://ubuntu.com/security/notices/USN-8635-1
- https://security-tracker.debian.org/tracker/CVE-2021-47354
- https://ubuntu.com/security/notices/USN-8633-2
- https://ubuntu.com/security/notices/USN-8645-1