CVE-2021-47620 (GCVE-0-2021-47620)
Vulnerability from cvelistv5
Published
2024-06-20 11:08
Modified
2026-08-05 08:48
Severity ?
8.1 (High) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: refactor malicious adv data check Check for out-of-bound read was being performed at the end of while num_reports loop, and would fill journal with false positives. Added check to beginning of loop processing so that it doesn't get checked after ptr has been advanced.
References
Impacted products
Vendor Product Version
Linux Linux Version: 048acfa4daf167b007b6bd8bef474e90c2282a5f
Version: 7d4238edd3bf8b8c75571cc3b382bc10438ac588
Version: 185c77cbb53bc7481acc5a0b4e6119bbe393d561
Version: 4a1491432394b22e585a185ffca49086e4046aae
Version: 24161b9c43de966789d5956428f45002d10f878e
Version: ffc9019bd991707701273c2e5d8aed472229fc4d
Version: 2de0e6a71ceb056e17e4684dce8b7640367996f9
Version: 640a476e38fce6c70c738ac09e5167e34f570303
Version: 3a56ef719f0b9682afb8a86d64b2399e36faa4e6
 Create a notification for this product.
   Linux Linux Version: 4.4.300   ≤
Version: 4.9.298   ≤
Version: 4.14.263   ≤
Version: 4.19.226   ≤
Version: 5.4.174   ≤
Version: 5.10.94   ≤
Version: 5.15.17   ≤
Version: 5.16.3   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47620",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-20T13:36:51.279922Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-20T13:36:59.452Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:47:40.577Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/305e92f525450f3e1b5f5c9dc7eadb152d66a082"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/7889b38a7f21ed19314f83194622b195d328465c"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/5a539c08d743d9910631448da78af5e961664c0e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/8819f93cd4a443dfe547aa622b21f723757df3fb"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/835d3706852537bf92eb23eb8635b8dee0c0aa67"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/83d5196b65d1b29e27d7dd16a3b9b439fb1d2dba"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/bcea886771c3f22a590c8c8b9139a107bd7f1e1c"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/5c968affa804ba98c3c603f37ffea6fba618025e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/899663be5e75dc0174dc8bda0b5e6826edf0b29a"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/hci_event.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "305e92f525450f3e1b5f5c9dc7eadb152d66a082",
              "status": "affected",
              "version": "048acfa4daf167b007b6bd8bef474e90c2282a5f",
              "versionType": "git"
            },
            {
              "lessThan": "7889b38a7f21ed19314f83194622b195d328465c",
              "status": "affected",
              "version": "7d4238edd3bf8b8c75571cc3b382bc10438ac588",
              "versionType": "git"
            },
            {
              "lessThan": "5a539c08d743d9910631448da78af5e961664c0e",
              "status": "affected",
              "version": "185c77cbb53bc7481acc5a0b4e6119bbe393d561",
              "versionType": "git"
            },
            {
              "lessThan": "8819f93cd4a443dfe547aa622b21f723757df3fb",
              "status": "affected",
              "version": "4a1491432394b22e585a185ffca49086e4046aae",
              "versionType": "git"
            },
            {
              "lessThan": "835d3706852537bf92eb23eb8635b8dee0c0aa67",
              "status": "affected",
              "version": "24161b9c43de966789d5956428f45002d10f878e",
              "versionType": "git"
            },
            {
              "lessThan": "83d5196b65d1b29e27d7dd16a3b9b439fb1d2dba",
              "status": "affected",
              "version": "ffc9019bd991707701273c2e5d8aed472229fc4d",
              "versionType": "git"
            },
            {
              "lessThan": "bcea886771c3f22a590c8c8b9139a107bd7f1e1c",
              "status": "affected",
              "version": "2de0e6a71ceb056e17e4684dce8b7640367996f9",
              "versionType": "git"
            },
            {
              "lessThan": "5c968affa804ba98c3c603f37ffea6fba618025e",
              "status": "affected",
              "version": "640a476e38fce6c70c738ac09e5167e34f570303",
              "versionType": "git"
            },
            {
              "lessThan": "899663be5e75dc0174dc8bda0b5e6826edf0b29a",
              "status": "affected",
              "version": "3a56ef719f0b9682afb8a86d64b2399e36faa4e6",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/hci_event.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4.4.302",
              "status": "affected",
              "version": "4.4.300",
              "versionType": "semver"
            },
            {
              "lessThan": "4.9.300",
              "status": "affected",
              "version": "4.9.298",
              "versionType": "semver"
            },
            {
              "lessThan": "4.14.265",
              "status": "affected",
              "version": "4.14.263",
              "versionType": "semver"
            },
            {
              "lessThan": "4.19.228",
              "status": "affected",
              "version": "4.19.226",
              "versionType": "semver"
            },
            {
              "lessThan": "5.4.176",
              "status": "affected",
              "version": "5.4.174",
              "versionType": "semver"
            },
            {
              "lessThan": "5.10.96",
              "status": "affected",
              "version": "5.10.94",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.19",
              "status": "affected",
              "version": "5.15.17",
              "versionType": "semver"
            },
            {
              "lessThan": "5.16.5",
              "status": "affected",
              "version": "5.16.3",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.4.302",
                  "versionStartIncluding": "4.4.300",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.300",
                  "versionStartIncluding": "4.9.298",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.265",
                  "versionStartIncluding": "4.14.263",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.228",
                  "versionStartIncluding": "4.19.226",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.176",
                  "versionStartIncluding": "5.4.174",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.96",
                  "versionStartIncluding": "5.10.94",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.19",
                  "versionStartIncluding": "5.15.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.16.5",
                  "versionStartIncluding": "5.16.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: refactor malicious adv data check\n\nCheck for out-of-bound read was being performed at the end of while\nnum_reports loop, and would fill journal with false positives. Added\ncheck to beginning of loop processing so that it doesn\u0027t get checked\nafter ptr has been advanced."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:A - The bug is in HCI LE Advertising Report parsing (hci_le_adv_report_evt), reached when a nearby BLE device\u2019s advertisements are delivered by the controller as HCI events\u2014the standard Adjacent Bluetooth path, not a host-local syscall-only interface.\nAC:L - A crafted advertising-report HCI event with num_reports/length inconsistent with the skb deterministically drives the loop into an out-of-bounds header read; the attacker controls the event contents (via RF advertising plus controller delivery, or an equivalent HCI source) with no uncontrollable race or rare layout dependency.\nPR:N - BLE advertising reports are processed without host authentication or local credentials; an unauthenticated adjacent Bluetooth peer needs no account or capability on the victim.\nUI:N - On typical phone/IoT deployments LE scanning runs in the background once Bluetooth is enabled, so reports are handled automatically with no extra victim action at exploit time.\nS:U - Impact is confined to the host kernel Bluetooth stack (slab over-read/possible oops) within the same OS security authority; there is no VM escape, IOMMU bypass, or other cross-boundary effect.\nC:H - With the check only after ptr advances, the next iteration can read hci_ev_le_advertising_info fields past skb_tail into adjacent slab memory (KASAN slab-OOB read); per guidance such OOB reads are Confidentiality High.\nI:N - This is a read-only out-of-bounds access of report headers; process_adv_report is gated by the in-loop length/tail checks and there is no OOB write, UAF, or control-flow hijack primitive.\nA:H - Reading past the skb kmalloc object can fault on unmapped/guarded memory and oops the kernel (as in the syzbot KASAN report on this path), which is scored Availability High."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:48:40.593Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/305e92f525450f3e1b5f5c9dc7eadb152d66a082"
        },
        {
          "url": "https://git.kernel.org/stable/c/7889b38a7f21ed19314f83194622b195d328465c"
        },
        {
          "url": "https://git.kernel.org/stable/c/5a539c08d743d9910631448da78af5e961664c0e"
        },
        {
          "url": "https://git.kernel.org/stable/c/8819f93cd4a443dfe547aa622b21f723757df3fb"
        },
        {
          "url": "https://git.kernel.org/stable/c/835d3706852537bf92eb23eb8635b8dee0c0aa67"
        },
        {
          "url": "https://git.kernel.org/stable/c/83d5196b65d1b29e27d7dd16a3b9b439fb1d2dba"
        },
        {
          "url": "https://git.kernel.org/stable/c/bcea886771c3f22a590c8c8b9139a107bd7f1e1c"
        },
        {
          "url": "https://git.kernel.org/stable/c/5c968affa804ba98c3c603f37ffea6fba618025e"
        },
        {
          "url": "https://git.kernel.org/stable/c/899663be5e75dc0174dc8bda0b5e6826edf0b29a"
        }
      ],
      "title": "Bluetooth: refactor malicious adv data check",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47620",
    "datePublished": "2024-06-20T11:08:09.320Z",
    "dateReserved": "2024-06-20T11:03:43.235Z",
    "dateUpdated": "2026-08-05T08:48:40.593Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/305e92f525450f3e1b5f5c9dc7eadb152d66a082\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/7889b38a7f21ed19314f83194622b195d328465c\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/5a539c08d743d9910631448da78af5e961664c0e\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/8819f93cd4a443dfe547aa622b21f723757df3fb\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/835d3706852537bf92eb23eb8635b8dee0c0aa67\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/83d5196b65d1b29e27d7dd16a3b9b439fb1d2dba\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/bcea886771c3f22a590c8c8b9139a107bd7f1e1c\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/5c968affa804ba98c3c603f37ffea6fba618025e\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/899663be5e75dc0174dc8bda0b5e6826edf0b29a\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-04T05:47:40.577Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2021-47620\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-06-20T13:36:51.279922Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-06-20T13:36:56.757Z\"}}], \"cna\": {\"title\": \"Bluetooth: refactor malicious adv data check\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 8.1, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"AV:A - The bug is in HCI LE Advertising Report parsing (hci_le_adv_report_evt), reached when a nearby BLE device\\u2019s advertisements are delivered by the controller as HCI events\\u2014the standard Adjacent Bluetooth path, not a host-local syscall-only interface.\\nAC:L - A crafted advertising-report HCI event with num_reports/length inconsistent with the skb deterministically drives the loop into an out-of-bounds header read; the attacker controls the event contents (via RF advertising plus controller delivery, or an equivalent HCI source) with no uncontrollable race or rare layout dependency.\\nPR:N - BLE advertising reports are processed without host authentication or local credentials; an unauthenticated adjacent Bluetooth peer needs no account or capability on the victim.\\nUI:N - On typical phone/IoT deployments LE scanning runs in the background once Bluetooth is enabled, so reports are handled automatically with no extra victim action at exploit time.\\nS:U - Impact is confined to the host kernel Bluetooth stack (slab over-read/possible oops) within the same OS security authority; there is no VM escape, IOMMU bypass, or other cross-boundary effect.\\nC:H - With the check only after ptr advances, the next iteration can read hci_ev_le_advertising_info fields past skb_tail into adjacent slab memory (KASAN slab-OOB read); per guidance such OOB reads are Confidentiality High.\\nI:N - This is a read-only out-of-bounds access of report headers; process_adv_report is gated by the in-loop length/tail checks and there is no OOB write, UAF, or control-flow hijack primitive.\\nA:H - Reading past the skb kmalloc object can fault on unmapped/guarded memory and oops the kernel (as in the syzbot KASAN report on this path), which is scored Availability High.\"}]}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"048acfa4daf167b007b6bd8bef474e90c2282a5f\", \"lessThan\": \"305e92f525450f3e1b5f5c9dc7eadb152d66a082\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"7d4238edd3bf8b8c75571cc3b382bc10438ac588\", \"lessThan\": \"7889b38a7f21ed19314f83194622b195d328465c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"185c77cbb53bc7481acc5a0b4e6119bbe393d561\", \"lessThan\": \"5a539c08d743d9910631448da78af5e961664c0e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4a1491432394b22e585a185ffca49086e4046aae\", \"lessThan\": \"8819f93cd4a443dfe547aa622b21f723757df3fb\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"24161b9c43de966789d5956428f45002d10f878e\", \"lessThan\": \"835d3706852537bf92eb23eb8635b8dee0c0aa67\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"ffc9019bd991707701273c2e5d8aed472229fc4d\", \"lessThan\": \"83d5196b65d1b29e27d7dd16a3b9b439fb1d2dba\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2de0e6a71ceb056e17e4684dce8b7640367996f9\", \"lessThan\": \"bcea886771c3f22a590c8c8b9139a107bd7f1e1c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"640a476e38fce6c70c738ac09e5167e34f570303\", \"lessThan\": \"5c968affa804ba98c3c603f37ffea6fba618025e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"3a56ef719f0b9682afb8a86d64b2399e36faa4e6\", \"lessThan\": \"899663be5e75dc0174dc8bda0b5e6826edf0b29a\", \"versionType\": \"git\"}], \"programFiles\": [\"net/bluetooth/hci_event.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.4.300\", \"lessThan\": \"4.4.302\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"4.9.298\", \"lessThan\": \"4.9.300\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"4.14.263\", \"lessThan\": \"4.14.265\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"4.19.226\", \"lessThan\": \"4.19.228\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.4.174\", \"lessThan\": \"5.4.176\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.10.94\", \"lessThan\": \"5.10.96\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.15.17\", \"lessThan\": \"5.15.19\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.16.3\", \"lessThan\": \"5.16.5\", \"versionType\": \"semver\"}], \"programFiles\": [\"net/bluetooth/hci_event.c\"], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/305e92f525450f3e1b5f5c9dc7eadb152d66a082\"}, {\"url\": \"https://git.kernel.org/stable/c/7889b38a7f21ed19314f83194622b195d328465c\"}, {\"url\": \"https://git.kernel.org/stable/c/5a539c08d743d9910631448da78af5e961664c0e\"}, {\"url\": \"https://git.kernel.org/stable/c/8819f93cd4a443dfe547aa622b21f723757df3fb\"}, {\"url\": \"https://git.kernel.org/stable/c/835d3706852537bf92eb23eb8635b8dee0c0aa67\"}, {\"url\": \"https://git.kernel.org/stable/c/83d5196b65d1b29e27d7dd16a3b9b439fb1d2dba\"}, {\"url\": \"https://git.kernel.org/stable/c/bcea886771c3f22a590c8c8b9139a107bd7f1e1c\"}, {\"url\": \"https://git.kernel.org/stable/c/5c968affa804ba98c3c603f37ffea6fba618025e\"}, {\"url\": \"https://git.kernel.org/stable/c/899663be5e75dc0174dc8bda0b5e6826edf0b29a\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nBluetooth: refactor malicious adv data check\\n\\nCheck for out-of-bound read was being performed at the end of while\\nnum_reports loop, and would fill journal with false positives. Added\\ncheck to beginning of loop processing so that it doesn\u0027t get checked\\nafter ptr has been advanced.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.4.302\", \"versionStartIncluding\": \"4.4.300\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.9.300\", \"versionStartIncluding\": \"4.9.298\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.14.265\", \"versionStartIncluding\": \"4.14.263\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.228\", \"versionStartIncluding\": \"4.19.226\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.176\", \"versionStartIncluding\": \"5.4.174\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.96\", \"versionStartIncluding\": \"5.10.94\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.19\", \"versionStartIncluding\": \"5.15.17\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.16.5\", \"versionStartIncluding\": \"5.16.3\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-05T08:48:40.593Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2021-47620\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-05T08:48:40.593Z\", \"dateReserved\": \"2024-06-20T11:03:43.235Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-06-20T11:08:09.320Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.