What is CVE-2021-47410?

CVE-2021-47410 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10, affecting Linux kernel versions from 3.19 onward and patched in 5.14.11 and 5.15. CVE-2021-47410 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2021-47410?

CVE-2021-47410 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2021-47410?

Yes, CVE-2021-47410 has been patched. Fixed versions include 5.14.11 and 5.15. If you are running Linux kernel 3.19 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2021-47410 actively exploited?

CVE-2021-47410 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2021-47410

Medium

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix svm_migrate_fini warning Device manager releases device-specific resources when a driver disconnects from a device, devm_memunmap_pages and devm_release_mem_region calls in svm_migrate_fini are redundant. It causes below warning trace after patch "drm/amdgpu: Split amdgpu_device_fini into early and late", so remove function svm_migrate_fini. BUG: https://gitlab.freedesktop.org/drm/amd/-/issues/1718 WARNING: CPU: 1 PID: 3646 at drivers/base/devres.c:795 devm_release_action+0x51/0x60 Call Trace: ? memunmap_pages+0x360/0x360 svm_migrate_fini+0x2d/0x60 [amdgpu] kgd2kfd_device_exit+0x23/0xa0 [amdgpu] amdgpu_amdkfd_device_fini_sw+0x1d/0x30 [amdgpu] amdgpu_device_fini_sw+0x45/0x290 [amdgpu] amdgpu_driver_release_kms+0x12/0x30 [amdgpu] drm_dev_release+0x20/0x40 [drm] release_nodes+0x196/0x1e0 device_release_driver_internal+0x104/0x1d0 driver_detach+0x47/0x90 bus_remove_driver+0x7a/0xd0 pci_unregister_driver+0x3d/0x90 amdgpu_exit+0x11/0x20 [amdgpu]

Package Linux Kernel

Published 2024-05-21

Last modified 2025-09-25

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected versions

Linux kernel versions 3.19 and later are affected. Fixed in 5.14.11, 5.15 and their respective stable series.

Affected from

≥ 3.19

Fixed in

✓ 5.14.11 5.14.x ✓ 5.15

References

2 total

Kernel Git
https://git.kernel.org/stable/c/197ae17722e989942b36e33e044787877f158574

Patch
Kernel Git
https://git.kernel.org/stable/c/ac7d732b24f4061f8a732ada49b054ab38c63e15

Patch

Details

CVE ID CVE-2021-47410

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2024-05-21

Modified 2025-09-25

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2021-47410?

CVE-2021-47410 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 . It affects Linux kernel versions from 3.19 onward and has been patched in 5.14.11 and 5.15. CVE-2021-47410 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2021-47410?

CVE-2021-47410 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2021-47410?

Yes. CVE-2021-47410 has been patched. Fixed versions include 5.14.11 and 5.15. If you are running Linux kernel 3.19 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2021-47410 actively exploited?

No. CVE-2021-47410 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.