What is CVE-2021-47282?

CVE-2021-47282 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10, classified as a Out-of-bounds Write flaw (CWE-787), affecting Linux kernel versions from 5.4 onward and patched in 5.4.126, 5.10.44, 5.12.11 and others. CVE-2021-47282 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2021-47282?

CVE-2021-47282 has a CVSS score of 7.8 out of 10, rated High severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2021-47282?

Yes, CVE-2021-47282 has been patched. Fixed versions include 5.4.126, 5.10.44, 5.12.11 and others. If you are running Linux kernel 5.4 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2021-47282 actively exploited?

CVE-2021-47282 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is Out-of-bounds Write (CWE-787)?

The product writes data past the end or before the beginning of the intended buffer. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/787.html

CVE-2021-47282

High

In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: Fix out-of-bounds access with more than 4 slaves Commit 571e31fa60b3 ("spi: bcm2835: Cache CS register value for ->prepare_message()") limited the number of slaves to 3 at compile-time. The limitation was necessitated by a statically-sized array prepare_cs[] in the driver private data which contains a per-slave register value. The commit sought to enforce the limitation at run-time by setting the controller's num_chipselect to 3: Slaves with a higher chipselect are rejected by spi_add_device(). However the commit neglected that num_chipselect only limits the number of *native* chipselects. If GPIO chipselects are specified in the device tree for more than 3 slaves, num_chipselect is silently raised by of_spi_get_gpio_numbers() and the result are out-of-bounds accesses to the statically-sized array prepare_cs[]. As a bandaid fix which is backportable to stable, raise the number of allowed slaves to 24 (which "ought to be enough for anybody"), enforce the limitation on slave ->setup and revert num_chipselect to 3 (which is the number of native chipselects supported by the controller). An upcoming for-next commit will allow an arbitrary number of slaves.

Package Linux Kernel

Published 2024-05-21

Last modified 2025-04-30

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

7.8

out of 10

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type

CWE-787

CVE-2021-47282 is a Out-of-bounds Write vulnerability

What is Out-of-bounds Write?

The product writes data past the end or before the beginning of the intended buffer. Learn more on MITRE CWE

Affected versions

Linux kernel versions 5.4 and later are affected. Fixed in 5.4.126, 5.10.44, 5.12.11, 5.13 and their respective stable series.

Affected from

≥ 5.4

Fixed in

✓ 5.4.126 5.4.x ✓ 5.10.44 5.10.x ✓ 5.12.11 5.12.x ✓ 5.13

References

4 total

Kernel Git
https://git.kernel.org/stable/c/01415ff85a24308059e06ca3e97fd7bf75648690

Patch
Kernel Git
https://git.kernel.org/stable/c/13817d466eb8713a1ffd254f537402f091d48444

Patch
Kernel Git
https://git.kernel.org/stable/c/82a8ffba54d31e97582051cb56ba1f988018681e

Patch
Kernel Git
https://git.kernel.org/stable/c/b5502580cf958b094f3b69dfe4eece90eae01fbc

Patch

Details

CVE ID CVE-2021-47282

Severity High

CVSS score 7.8 / 10

CVSS version 3.1

Published 2024-05-21

Modified 2025-04-30

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2021-47282?

CVE-2021-47282 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10 , classified as an Out-of-bounds Write flaw (CWE-787) . It affects Linux kernel versions from 5.4 onward and has been patched in 5.4.126, 5.10.44, 5.12.11 and others. CVE-2021-47282 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2021-47282?

CVE-2021-47282 has a CVSS score of 7.8 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2021-47282?

Yes. CVE-2021-47282 has been patched. Fixed versions include 5.4.126, 5.10.44, 5.12.11 and others. If you are running Linux kernel 5.4 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2021-47282 actively exploited?

No. CVE-2021-47282 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.