CVE-2021-47087 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix incorrect page free bug Pointer to the allocated pages (struct page *page) has already progressed towards the end of allocation. It is incorrect to perform __free_pages(page, order) using this pointer as we would free any arbitrary pages. Fix this by stop modifying the page pointer.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/18549bf4b21c739a9def39f27dcac53e27286ab5
https://git.kernel.org/stable/c/806142c805cacd098e61bdc0f72c778a2389fe4a
https://git.kernel.org/stable/c/91e94e42f6fc49635f1a16d8ae3f79552bcfda29
https://git.kernel.org/stable/c/ad338d825e3f7b96ee542bf313728af2d19fe9ad
https://lore.kernel.org/linux-cve-announce/2024030413-CVE-2021-47087-4132@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2021-47087
https://www.cve.org/CVERecord?id=CVE-2021-47087

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-03-04T18:10:17.107Z

Updated: 2024-08-04T05:24:39.851Z

Reserved: 2024-02-29T22:33:44.299Z

Link: CVE-2021-47087

Vulnrichment

Updated: 2024-08-04T05:24:39.851Z

NVD

Status : Awaiting Analysis

Published: 2024-03-04T18:15:07.457

Modified: 2024-03-05T13:41:01.900

Link: CVE-2021-47087

Redhat

Severity : Moderate

Publid Date: 2024-03-04T00:00:00Z

Links: CVE-2021-47087 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47087", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-29T22:33:44.299Z", "datePublished": "2024-03-04T18:10:17.107Z", "dateUpdated": "2024-08-04T05:24:39.851Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:01:51.825Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntee: optee: Fix incorrect page free bug\n\nPointer to the allocated pages (struct page *page) has already\nprogressed towards the end of allocation. It is incorrect to perform\n__free_pages(page, order) using this pointer as we would free any\narbitrary pages. Fix this by stop modifying the page pointer."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/tee/optee/core.c"], "versions": [{"version": "3c712f14d8a9", "lessThan": "806142c805ca", "status": "affected", "versionType": "git"}, {"version": "1340dc3fb75e", "lessThan": "ad338d825e3f", "status": "affected", "versionType": "git"}, {"version": "ec185dd3ab25", "lessThan": "91e94e42f6fc", "status": "affected", "versionType": "git"}, {"version": "ec185dd3ab25", "lessThan": "18549bf4b21c", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/tee/optee/core.c"], "versions": [{"version": "5.14", "status": "affected"}, {"version": "0", "lessThan": "5.14", "status": "unaffected", "versionType": "custom"}, {"version": "5.4.169", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.10.89", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.15.12", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.16", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/806142c805cacd098e61bdc0f72c778a2389fe4a"}, {"url": "https://git.kernel.org/stable/c/ad338d825e3f7b96ee542bf313728af2d19fe9ad"}, {"url": "https://git.kernel.org/stable/c/91e94e42f6fc49635f1a16d8ae3f79552bcfda29"}, {"url": "https://git.kernel.org/stable/c/18549bf4b21c739a9def39f27dcac53e27286ab5"}], "title": "tee: optee: Fix incorrect page free bug", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47087", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-06T20:26:26.296406Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:13:35.356Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:39.851Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/806142c805cacd098e61bdc0f72c778a2389fe4a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/ad338d825e3f7b96ee542bf313728af2d19fe9ad", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/91e94e42f6fc49635f1a16d8ae3f79552bcfda29", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/18549bf4b21c739a9def39f27dcac53e27286ab5", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/806142c805cacd098e61bdc0f72c778a2389fe4a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/ad338d825e3f7b96ee542bf313728af2d19fe9ad", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/91e94e42f6fc49635f1a16d8ae3f79552bcfda29", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/18549bf4b21c739a9def39f27dcac53e27286ab5", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:39.851Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47087", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-06T20:26:26.296406Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:16.206Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "tee: optee: Fix incorrect page free bug", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3c712f14d8a9", "lessThan": "806142c805ca", "versionType": "git"}, {"status": "affected", "version": "1340dc3fb75e", "lessThan": "ad338d825e3f", "versionType": "git"}, {"status": "affected", "version": "ec185dd3ab25", "lessThan": "91e94e42f6fc", "versionType": "git"}, {"status": "affected", "version": "ec185dd3ab25", "lessThan": "18549bf4b21c", "versionType": "git"}], "programFiles": ["drivers/tee/optee/core.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.14"}, {"status": "unaffected", "version": "0", "lessThan": "5.14", "versionType": "custom"}, {"status": "unaffected", "version": "5.4.169", "versionType": "custom", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.89", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.12", "versionType": "custom", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "5.16", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/tee/optee/core.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/806142c805cacd098e61bdc0f72c778a2389fe4a"}, {"url": "https://git.kernel.org/stable/c/ad338d825e3f7b96ee542bf313728af2d19fe9ad"}, {"url": "https://git.kernel.org/stable/c/91e94e42f6fc49635f1a16d8ae3f79552bcfda29"}, {"url": "https://git.kernel.org/stable/c/18549bf4b21c739a9def39f27dcac53e27286ab5"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntee: optee: Fix incorrect page free bug\n\nPointer to the allocated pages (struct page *page) has already\nprogressed towards the end of allocation. It is incorrect to perform\n__free_pages(page, order) using this pointer as we would free any\narbitrary pages. Fix this by stop modifying the page pointer."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:01:51.825Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47087", "state": "PUBLISHED", "dateUpdated": "2024-08-04T05:24:39.851Z", "dateReserved": "2024-02-29T22:33:44.299Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-03-04T18:10:17.107Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}