What is CVE-2021-47080?

CVE-2021-47080 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10, classified as a Divide By Zero flaw (CWE-369), affecting Linux kernel versions from 5.10 onward and patched in 5.10.40, 5.12.7 and 5.13. CVE-2021-47080 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2021-47080?

CVE-2021-47080 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2021-47080?

Yes, CVE-2021-47080 has been patched. Fixed versions include 5.10.40, 5.12.7 and 5.13. If you are running Linux kernel 5.10 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2021-47080 actively exploited?

CVE-2021-47080 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is Divide By Zero (CWE-369)?

The product divides a value by zero, causing a crash or unexpected behaviour. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/369.html

CVE-2021-47080

Medium

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prevent divide-by-zero error triggered by the user The user_entry_size is supplied by the user and later used as a denominator to calculate number of entries. The zero supplied by the user will trigger the following divide-by-zero error: divide error: 0000 [#1] SMP KASAN PTI CPU: 4 PID: 497 Comm: c_repro Not tainted 5.13.0-rc1+ #281 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 RIP: 0010:ib_uverbs_handler_UVERBS_METHOD_QUERY_GID_TABLE+0x1b1/0x510 Code: 87 59 03 00 00 e8 9f ab 1e ff 48 8d bd a8 00 00 00 e8 d3 70 41 ff 44 0f b7 b5 a8 00 00 00 e8 86 ab 1e ff 31 d2 4c 89 f0 31 ff <49> f7 f5 48 89 d6 48 89 54 24 10 48 89 04 24 e8 1b ad 1e ff 48 8b RSP: 0018:ffff88810416f828 EFLAGS: 00010246 RAX: 0000000000000008 RBX: 1ffff1102082df09 RCX: ffffffff82183f3d RDX: 0000000000000000 RSI: ffff888105f2da00 RDI: 0000000000000000 RBP: ffff88810416fa98 R08: 0000000000000001 R09: ffffed102082df5f R10: ffff88810416faf7 R11: ffffed102082df5e R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000008 R15: ffff88810416faf0 FS: 00007f5715efa740(0000) GS:ffff88811a700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000840 CR3: 000000010c2e0001 CR4: 0000000000370ea0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ? ib_uverbs_handler_UVERBS_METHOD_INFO_HANDLES+0x4b0/0x4b0 ib_uverbs_cmd_verbs+0x1546/0x1940 ib_uverbs_ioctl+0x186/0x240 __x64_sys_ioctl+0x38a/0x1220 do_syscall_64+0x3f/0x80 entry_SYSCALL_64_after_hwframe+0x44/0xae

Package Linux Kernel

Published 2024-03-01

Last modified 2024-12-09

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness type

CWE-369

CVE-2021-47080 is a Divide By Zero vulnerability

What is Divide By Zero?

The product divides a value by zero, causing a crash or unexpected behaviour. Learn more on MITRE CWE

Affected versions

Linux kernel versions 5.10 and later are affected. Fixed in 5.10.40, 5.12.7, 5.13 and their respective stable series.

Affected from

≥ 5.10

Fixed in

✓ 5.10.40 5.10.x ✓ 5.12.7 5.12.x ✓ 5.13

References

3 total

Kernel Git
https://git.kernel.org/stable/c/54d87913f147a983589923c7f651f97de9af5be1

Patch
Kernel Git
https://git.kernel.org/stable/c/66ab7fcdac34b890017f04f391507ef5b2b89a13

Patch
Kernel Git
https://git.kernel.org/stable/c/e6871b4270c05f8b212e7d98aee82b357972c80a

Patch

Details

CVE ID CVE-2021-47080

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2024-03-01

Modified 2024-12-09

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2021-47080?

CVE-2021-47080 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 , classified as a Divide By Zero flaw (CWE-369) . It affects Linux kernel versions from 5.10 onward and has been patched in 5.10.40, 5.12.7 and 5.13. CVE-2021-47080 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2021-47080?

CVE-2021-47080 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2021-47080?

Yes. CVE-2021-47080 has been patched. Fixed versions include 5.10.40, 5.12.7 and 5.13. If you are running Linux kernel 5.10 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2021-47080 actively exploited?

No. CVE-2021-47080 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.