CVE-2021-47434

Medium

In the Linux kernel, the following vulnerability has been resolved: xhci: Fix command ring pointer corruption while aborting a command The command ring pointer is located at [6:63] bits of the command ring control register (CRCR). All the control bits like command stop, abort are located at [0:3] bits. While aborting a command, we read the CRCR and set the abort bit and write to the CRCR. The read will always give command ring pointer as all zeros. So we essentially write only the control bits. Since we split the 64 bit write into two 32 bit writes, there is a possibility of xHC command ring stopped before the upper dword (all zeros) is written. If that happens, xHC updates the upper dword of its internal command ring pointer with all zeros. Next time, when the command ring is restarted, we see xHC memory access failures. Fix this issue by only writing to the lower dword of CRCR where all control bits are located.

Package Linux Kernel
Published 2024-05-22
Last modified 2025-09-25
CVSS version 3.1
Patch available
Yes

CVSS 3.1 score

5.5

out of 10
Medium
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
High
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected versions

Linux kernel versions 3.0.49, 3.2.32, 3.4.13, 3.5.6, 3.6.1, 3.7 and later are affected. Fixed in 4.14.252, 4.19.213, 5.4.155, 5.10.75, 5.14.14, 5.15 and their respective stable series.

Affected from
≥ 3.0.49 ≥ 3.2.32 ≥ 3.4.13 ≥ 3.5.6 ≥ 3.6.1 ≥ 3.7
Fixed in
✓ 4.14.252 4.14.x ✓ 4.19.213 4.19.x ✓ 5.4.155 5.4.x ✓ 5.10.75 5.10.x ✓ 5.14.14 5.14.x ✓ 5.15

References

6 total
Showing 5 of 6 references View all on NVD

Frequently asked questions

  • What is CVE-2021-47434?

    CVE-2021-47434 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 . It affects Linux kernel versions from 3.0.49 onward and has been patched in 4.14.252, 4.19.213, 5.4.155 and others. CVE-2021-47434 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

  • What is the CVSS score for CVE-2021-47434?

    CVE-2021-47434 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H .

  • Is there a patch available for CVE-2021-47434?

    Yes. CVE-2021-47434 has been patched. Fixed versions include 4.14.252, 4.19.213, 5.4.155 and others. If you are running Linux kernel 3.0.49 or later up to the fix versions, apply the relevant patch for your kernel branch.

  • Is CVE-2021-47434 actively exploited?

    No. CVE-2021-47434 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

Back to
All CVEs
View on
NVD / NIST