一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:hamradio: improve the incomplete fix to avoid NPDThe previous commit 3e0588c291d6 ( hamradio: defer ax25 kfree afterunregister_netdev ) reorder the kfree operations and unregister_netdevoperation to prevent UAF.This commit improves the previous one by also deferring the nullify ofthe ax->tty pointer. Otherwise, a NULL pointer dereference bug occurs.Partial of the stack trace is shown below.BUG: kernel NULL pointer dereference, address: 0000000000000538RIP: 0010:ax_xmit+0x1f9/0x400...Call Trace: dev_hard_start_xmit+0xec/0x320 sch_direct_xmit+0xea/0x240 __qdisc_run+0x166/0x5c0 __dev_queue_xmit+0x2c7/0xaf0 ax25_std_establish_data_link+0x59/0x60 ax25_connect+0x3a0/0x500 ? security_socket_connect+0x2b/0x40 __sys_connect+0x96/0xc0 ? __hrtimer_init+0xc0/0xc0 ? common_nsleep+0x2e/0x50 ? switch_fpu_return+0x139/0x1a0 __x64_sys_connect+0x11/0x20 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9The crash point is shown as belowstatic void ax_encaps(...) { ... set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags); // ax->tty = NULL! ...}By placing the nullify action after the unregister_netdev, the ax->ttypointer won t be assigned as NULL net_device framework layer is wellsynchronized.

漏洞公开时间：2024-03-05 02:15:07

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:hamradio: improve the incomplete fix to avoid NPDThe previous commit 3e0588c291d6 ( hamradio: defer ax25 kfree afterunregister_netdev ) reorder the kfree operations and unregister_netdevoperation to prevent UAF.This commit improves the previous one by also deferring the nullify ofthe ax->tty pointer. Otherwise, a NULL pointer dereference bug occurs.Partial of the stack trace is shown below.BUG: kernel NULL pointer dereference, address: 0000000000000538RIP: 0010:ax_xmit+0x1f9/0x400...Call Trace: dev_hard_start_xmit+0xec/0x320 sch_direct_xmit+0xea/0x240 __qdisc_run+0x166/0x5c0 __dev_queue_xmit+0x2c7/0xaf0 ax25_std_establish_data_link+0x59/0x60 ax25_connect+0x3a0/0x500 ? security_socket_connect+0x2b/0x40 __sys_connect+0x96/0xc0 ? __hrtimer_init+0xc0/0xc0 ? common_nsleep+0x2e/0x50 ? switch_fpu_return+0x139/0x1a0 __x64_sys_connect+0x11/0x20 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9The crash point is shown as belowstatic void ax_encaps(...) { ... set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags); // ax->tty = NULL! ...}By placing the nullify action after the unregister_netdev, the ax->ttypointer won t be assigned as NULL net_device framework layer is wellsynchronized.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:hamradio: improve the incomplete fix to avoid NPDThe previous commit 3e0588c291d6 ( hamradio: defer ax25 kfree afterunregister_netdev ) reorder the kfree operations and unregister_netdevoperation to prevent UAF.This commit improves the previous one by also deferring the nullify ofthe ax->tty pointer. Otherwise, a NULL pointer dereference bug occurs.Partial of the stack trace is shown below.BUG: kernel NULL pointer dereference, address: 0000000000000538RIP: 0010:ax_xmit+0x1f9/0x400...Call Trace: dev_hard_start_xmit+0xec/0x320 sch_direct_xmit+0xea/0x240 __qdisc_run+0x166/0x5c0 __dev_queue_xmit+0x2c7/0xaf0 ax25_std_establish_data_link+0x59/0x60 ax25_connect+0x3a0/0x500 ? security_socket_connect+0x2b/0x40 __sys_connect+0x96/0xc0 ? __hrtimer_init+0xc0/0xc0 ? common_nsleep+0x2e/0x50 ? switch_fpu_return+0x139/0x1a0 __x64_sys_connect+0x11/0x20 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9The crash point is shown as belowstatic void ax_encaps(...) { ... set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags); // ax->tty = NULL! ...}By placing the nullify action after the unregister_netdev, the ax->ttypointer won t be assigned as NULL net_device framework layer is wellsynchronized.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:hamradio: improve the incomplete fix to avoid NPDThe previous commit 3e0588c291d6 ( hamradio: defer ax25 kfree afterunregister_netdev ) reorder the kfree operations and unregister_netdevoperation to prevent UAF.This commit improves the previous one by also deferring the nullify ofthe ax->tty pointer. Otherwise, a NULL pointer dereference bug occurs.Partial of the stack trace is shown below.BUG: kernel NULL pointer dereference, address: 0000000000000538RIP: 0010:ax_xmit+0x1f9/0x400...Call Trace: dev_hard_start_xmit+0xec/0x320 sch_direct_xmit+0xea/0x240 __qdisc_run+0x166/0x5c0 __dev_queue_xmit+0x2c7/0xaf0 ax25_std_establish_data_link+0x59/0x60 ax25_connect+0x3a0/0x500 ? security_socket_connect+0x2b/0x40 __sys_connect+0x96/0xc0 ? __hrtimer_init+0xc0/0xc0 ? common_nsleep+0x2e/0x50 ? switch_fpu_return+0x139/0x1a0 __x64_sys_connect+0x11/0x20 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9The crash point is shown as belowstatic void ax_encaps(...) { ... set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags); // ax->tty = NULL! ...}By placing the nullify action after the unregister_netdev, the ax->ttypointer won t be assigned as NULL net_device framework layer is wellsynchronized.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:hamradio: improve the incomplete fix to avoid NPDThe previous commit 3e0588c291d6 ( hamradio: defer ax25 kfree afterunregister_netdev ) reorder the kfree operations and unregister_netdevoperation to prevent UAF.This commit improves the previous one by also deferring the nullify ofthe ax->tty pointer. Otherwise, a NULL pointer dereference bug occurs.Partial of the stack trace is shown below.BUG: kernel NULL pointer dereference, address: 0000000000000538RIP: 0010:ax_xmit+0x1f9/0x400...Call Trace: dev_hard_start_xmit+0xec/0x320 sch_direct_xmit+0xea/0x240 __qdisc_run+0x166/0x5c0 __dev_queue_xmit+0x2c7/0xaf0 ax25_std_establish_data_link+0x59/0x60 ax25_connect+0x3a0/0x500 ? security_socket_connect+0x2b/0x40 __sys_connect+0x96/0xc0 ? __hrtimer_init+0xc0/0xc0 ? common_nsleep+0x2e/0x50 ? switch_fpu_return+0x139/0x1a0 __x64_sys_connect+0x11/0x20 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9The crash point is shown as belowstatic void ax_encaps(...) { ... set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags); // ax->tty = NULL! ...}By placing the nullify action after the unregister_netdev, the ax->ttypointer won t be assigned as NULL net_device framework layer is wellsynchronized.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:hamradio: improve the incomplete fix to avoid NPDThe previous commit 3e0588c291d6 ( hamradio: defer ax25 kfree afterunregister_netdev ) reorder the kfree operations and unregister_netdevoperation to prevent UAF.This commit improves the previous one by also deferring the nullify ofthe ax->tty pointer. Otherwise, a NULL pointer dereference bug occurs.Partial of the stack trace is shown below.BUG: kernel NULL pointer dereference, address: 0000000000000538RIP: 0010:ax_xmit+0x1f9/0x400...Call Trace: dev_hard_start_xmit+0xec/0x320 sch_direct_xmit+0xea/0x240 __qdisc_run+0x166/0x5c0 __dev_queue_xmit+0x2c7/0xaf0 ax25_std_establish_data_link+0x59/0x60 ax25_connect+0x3a0/0x500 ? security_socket_connect+0x2b/0x40 __sys_connect+0x96/0xc0 ? __hrtimer_init+0xc0/0xc0 ? common_nsleep+0x2e/0x50 ? switch_fpu_return+0x139/0x1a0 __x64_sys_connect+0x11/0x20 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9The crash point is shown as belowstatic void ax_encaps(...) { ... set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags); // ax->tty = NULL! ...}By placing the nullify action after the unregister_netdev, the ax->ttypointer won t be assigned as NULL net_device framework layer is wellsynchronized.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:hamradio: improve the incomplete fix to avoid NPDThe previous commit 3e0588c291d6 ( hamradio: defer ax25 kfree afterunregister_netdev ) reorder the kfree operations and unregister_netdevoperation to prevent UAF.This commit improves the previous one by also deferring the nullify ofthe ax->tty pointer. Otherwise, a NULL pointer dereference bug occurs.Partial of the stack trace is shown below.BUG: kernel NULL pointer dereference, address: 0000000000000538RIP: 0010:ax_xmit+0x1f9/0x400...Call Trace: dev_hard_start_xmit+0xec/0x320 sch_direct_xmit+0xea/0x240 __qdisc_run+0x166/0x5c0 __dev_queue_xmit+0x2c7/0xaf0 ax25_std_establish_data_link+0x59/0x60 ax25_connect+0x3a0/0x500 ? security_socket_connect+0x2b/0x40 __sys_connect+0x96/0xc0 ? __hrtimer_init+0xc0/0xc0 ? common_nsleep+0x2e/0x50 ? switch_fpu_return+0x139/0x1a0 __x64_sys_connect+0x11/0x20 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9The crash point is shown as belowstatic void ax_encaps(...) { ... set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags); // ax->tty = NULL! ...}By placing the nullify action after the unregister_netdev, the ax->ttypointer won t be assigned as NULL net_device framework layer is wellsynchronized.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:hamradio: improve the incomplete fix to avoid NPDThe previous commit 3e0588c291d6 ( hamradio: defer ax25 kfree afterunregister_netdev ) reorder the kfree operations and unregister_netdevoperation to prevent UAF.This commit improves the previous one by also deferring the nullify ofthe ax->tty pointer. Otherwise, a NULL pointer dereference bug occurs.Partial of the stack trace is shown below.BUG: kernel NULL pointer dereference, address: 0000000000000538RIP: 0010:ax_xmit+0x1f9/0x400...Call Trace: dev_hard_start_xmit+0xec/0x320 sch_direct_xmit+0xea/0x240 __qdisc_run+0x166/0x5c0 __dev_queue_xmit+0x2c7/0xaf0 ax25_std_establish_data_link+0x59/0x60 ax25_connect+0x3a0/0x500 ? security_socket_connect+0x2b/0x40 __sys_connect+0x96/0xc0 ? __hrtimer_init+0xc0/0xc0 ? common_nsleep+0x2e/0x50 ? switch_fpu_return+0x139/0x1a0 __x64_sys_connect+0x11/0x20 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9The crash point is shown as belowstatic void ax_encaps(...) { ... set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags); // ax->tty = NULL! ...}By placing the nullify action after the unregister_netdev, the ax->ttypointer won t be assigned as NULL net_device framework layer is wellsynchronized.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:hamradio: improve the incomplete fix to avoid NPDThe previous commit 3e0588c291d6 ( hamradio: defer ax25 kfree afterunregister_netdev ) reorder the kfree operations and unregister_netdevoperation to prevent UAF.This commit improves the previous one by also deferring the nullify ofthe ax->tty pointer. Otherwise, a NULL pointer dereference bug occurs.Partial of the stack trace is shown below.BUG: kernel NULL pointer dereference, address: 0000000000000538RIP: 0010:ax_xmit+0x1f9/0x400...Call Trace: dev_hard_start_xmit+0xec/0x320 sch_direct_xmit+0xea/0x240 __qdisc_run+0x166/0x5c0 __dev_queue_xmit+0x2c7/0xaf0 ax25_std_establish_data_link+0x59/0x60 ax25_connect+0x3a0/0x500 ? security_socket_connect+0x2b/0x40 __sys_connect+0x96/0xc0 ? __hrtimer_init+0xc0/0xc0 ? common_nsleep+0x2e/0x50 ? switch_fpu_return+0x139/0x1a0 __x64_sys_connect+0x11/0x20 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9The crash point is shown as belowstatic void ax_encaps(...) { ... set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags); // ax->tty = NULL! ...}By placing the nullify action after the unregister_netdev, the ax->ttypointer won t be assigned as NULL net_device framework layer is wellsynchronized.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:hamradio: improve the incomplete fix to avoid NPDThe previous commit 3e0588c291d6 ( hamradio: defer ax25 kfree afterunregister_netdev ) reorder the kfree operations and unregister_netdevoperation to prevent UAF.This commit improves the previous one by also deferring the nullify ofthe ax->tty pointer. Otherwise, a NULL pointer dereference bug occurs.Partial of the stack trace is shown below.BUG: kernel NULL pointer dereference, address: 0000000000000538RIP: 0010:ax_xmit+0x1f9/0x400...Call Trace: dev_hard_start_xmit+0xec/0x320 sch_direct_xmit+0xea/0x240 __qdisc_run+0x166/0x5c0 __dev_queue_xmit+0x2c7/0xaf0 ax25_std_establish_data_link+0x59/0x60 ax25_connect+0x3a0/0x500 ? security_socket_connect+0x2b/0x40 __sys_connect+0x96/0xc0 ? __hrtimer_init+0xc0/0xc0 ? common_nsleep+0x2e/0x50 ? switch_fpu_return+0x139/0x1a0 __x64_sys_connect+0x11/0x20 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9The crash point is shown as belowstatic void ax_encaps(...) { ... set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags); // ax->tty = NULL! ...}By placing the nullify action after the unregister_netdev, the ax->ttypointer won t be assigned as NULL net_device framework layer is wellsynchronized.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:hamradio: improve the incomplete fix to avoid NPDThe previous commit 3e0588c291d6 ( hamradio: defer ax25 kfree afterunregister_netdev ) reorder the kfree operations and unregister_netdevoperation to prevent UAF.This commit improves the previous one by also deferring the nullify ofthe ax->tty pointer. Otherwise, a NULL pointer dereference bug occurs.Partial of the stack trace is shown below.BUG: kernel NULL pointer dereference, address: 0000000000000538RIP: 0010:ax_xmit+0x1f9/0x400...Call Trace: dev_hard_start_xmit+0xec/0x320 sch_direct_xmit+0xea/0x240 __qdisc_run+0x166/0x5c0 __dev_queue_xmit+0x2c7/0xaf0 ax25_std_establish_data_link+0x59/0x60 ax25_connect+0x3a0/0x500 ? security_socket_connect+0x2b/0x40 __sys_connect+0x96/0xc0 ? __hrtimer_init+0xc0/0xc0 ? common_nsleep+0x2e/0x50 ? switch_fpu_return+0x139/0x1a0 __x64_sys_connect+0x11/0x20 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9The crash point is shown as belowstatic void ax_encaps(...) { ... set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags); // ax->tty = NULL! ...}By placing the nullify action after the unregister_netdev, the ax->ttypointer won t be assigned as NULL net_device framework layer is wellsynchronized.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:hamradio: improve the incomplete fix to avoid NPDThe previous commit 3e0588c291d6 ( hamradio: defer ax25 kfree afterunregister_netdev ) reorder the kfree operations and unregister_netdevoperation to prevent UAF.This commit improves the previous one by also deferring the nullify ofthe ax->tty pointer. Otherwise, a NULL pointer dereference bug occurs.Partial of the stack trace is shown below.BUG: kernel NULL pointer dereference, address: 0000000000000538RIP: 0010:ax_xmit+0x1f9/0x400...Call Trace: dev_hard_start_xmit+0xec/0x320 sch_direct_xmit+0xea/0x240 __qdisc_run+0x166/0x5c0 __dev_queue_xmit+0x2c7/0xaf0 ax25_std_establish_data_link+0x59/0x60 ax25_connect+0x3a0/0x500 ? security_socket_connect+0x2b/0x40 __sys_connect+0x96/0xc0 ? __hrtimer_init+0xc0/0xc0 ? common_nsleep+0x2e/0x50 ? switch_fpu_return+0x139/0x1a0 __x64_sys_connect+0x11/0x20 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9The crash point is shown as belowstatic void ax_encaps(...) { ... set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags); // ax->tty = NULL! ...}By placing the nullify action after the unregister_netdev, the ax->ttypointer won t be assigned as NULL net_device framework layer is wellsynchronized.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:hamradio: improve the incomplete fix to avoid NPDThe previous commit 3e0588c291d6 ( hamradio: defer ax25 kfree afterunregister_netdev ) reorder the kfree operations and unregister_netdevoperation to prevent UAF.This commit improves the previous one by also deferring the nullify ofthe ax->tty pointer. Otherwise, a NULL pointer dereference bug occurs.Partial of the stack trace is shown below.BUG: kernel NULL pointer dereference, address: 0000000000000538RIP: 0010:ax_xmit+0x1f9/0x400...Call Trace: dev_hard_start_xmit+0xec/0x320 sch_direct_xmit+0xea/0x240 __qdisc_run+0x166/0x5c0 __dev_queue_xmit+0x2c7/0xaf0 ax25_std_establish_data_link+0x59/0x60 ax25_connect+0x3a0/0x500 ? security_socket_connect+0x2b/0x40 __sys_connect+0x96/0xc0 ? __hrtimer_init+0xc0/0xc0 ? common_nsleep+0x2e/0x50 ? switch_fpu_return+0x139/0x1a0 __x64_sys_connect+0x11/0x20 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9The crash point is shown as belowstatic void ax_encaps(...) { ... set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags); // ax->tty = NULL! ...}By placing the nullify action after the unregister_netdev, the ax->ttypointer won t be assigned as NULL net_device framework layer is wellsynchronized.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:hamradio: improve the incomplete fix to avoid NPDThe previous commit 3e0588c291d6 ( hamradio: defer ax25 kfree afterunregister_netdev ) reorder the kfree operations and unregister_netdevoperation to prevent UAF.This commit improves the previous one by also deferring the nullify ofthe ax->tty pointer. Otherwise, a NULL pointer dereference bug occurs.Partial of the stack trace is shown below.BUG: kernel NULL pointer dereference, address: 0000000000000538RIP: 0010:ax_xmit+0x1f9/0x400...Call Trace: dev_hard_start_xmit+0xec/0x320 sch_direct_xmit+0xea/0x240 __qdisc_run+0x166/0x5c0 __dev_queue_xmit+0x2c7/0xaf0 ax25_std_establish_data_link+0x59/0x60 ax25_connect+0x3a0/0x500 ? security_socket_connect+0x2b/0x40 __sys_connect+0x96/0xc0 ? __hrtimer_init+0xc0/0xc0 ? common_nsleep+0x2e/0x50 ? switch_fpu_return+0x139/0x1a0 __x64_sys_connect+0x11/0x20 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9The crash point is shown as belowstatic void ax_encaps(...) { ... set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags); // ax->tty = NULL! ...}By placing the nullify action after the unregister_netdev, the ax->ttypointer won t be assigned as NULL net_device framework layer is wellsynchronized.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:hamradio: improve the incomplete fix to avoid NPDThe previous commit 3e0588c291d6 ( hamradio: defer ax25 kfree afterunregister_netdev ) reorder the kfree operations and unregister_netdevoperation to prevent UAF.This commit improves the previous one by also deferring the nullify ofthe ax->tty pointer. Otherwise, a NULL pointer dereference bug occurs.Partial of the stack trace is shown below.BUG: kernel NULL pointer dereference, address: 0000000000000538RIP: 0010:ax_xmit+0x1f9/0x400...Call Trace: dev_hard_start_xmit+0xec/0x320 sch_direct_xmit+0xea/0x240 __qdisc_run+0x166/0x5c0 __dev_queue_xmit+0x2c7/0xaf0 ax25_std_establish_data_link+0x59/0x60 ax25_connect+0x3a0/0x500 ? security_socket_connect+0x2b/0x40 __sys_connect+0x96/0xc0 ? __hrtimer_init+0xc0/0xc0 ? common_nsleep+0x2e/0x50 ? switch_fpu_return+0x139/0x1a0 __x64_sys_connect+0x11/0x20 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9The crash point is shown as belowstatic void ax_encaps(...) { ... set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags); // ax->tty = NULL! ...}By placing the nullify action after the unregister_netdev, the ax->ttypointer won t be assigned as NULL net_device framework layer is wellsynchronized.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:hamradio: improve the incomplete fix to avoid NPDThe previous commit 3e0588c291d6 ( hamradio: defer ax25 kfree afterunregister_netdev ) reorder the kfree operations and unregister_netdevoperation to prevent UAF.This commit improves the previous one by also deferring the nullify ofthe ax->tty pointer. Otherwise, a NULL pointer dereference bug occurs.Partial of the stack trace is shown below.BUG: kernel NULL pointer dereference, address: 0000000000000538RIP: 0010:ax_xmit+0x1f9/0x400...Call Trace: dev_hard_start_xmit+0xec/0x320 sch_direct_xmit+0xea/0x240 __qdisc_run+0x166/0x5c0 __dev_queue_xmit+0x2c7/0xaf0 ax25_std_establish_data_link+0x59/0x60 ax25_connect+0x3a0/0x500 ? security_socket_connect+0x2b/0x40 __sys_connect+0x96/0xc0 ? __hrtimer_init+0xc0/0xc0 ? common_nsleep+0x2e/0x50 ? switch_fpu_return+0x139/0x1a0 __x64_sys_connect+0x11/0x20 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9The crash point is shown as belowstatic void ax_encaps(...) { ... set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags); // ax->tty = NULL! ...}By placing the nullify action after the unregister_netdev, the ax->ttypointer won t be assigned as NULL net_device framework layer is wellsynchronized.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2267940 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2267940 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2267940 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2267940 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3:

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3:

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2267940 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3:

9.openEuler-24.03-LTS:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3:

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2267940 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

修复是否涉及abi变化(是/否)：

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2267940 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(4.19.90):受影响

2.openEuler-20.03-LTS-SP4:受影响

3.openEuler-22.03-LTS(5.10.0):受影响

4.openEuler-22.03-LTS-SP1(5.10.0):受影响

5.openEuler-22.03-LTS-SP2(5.10.0):受影响

6.openEuler-22.03-LTS-SP3:受影响

7.openEuler-22.03-LTS-Next(5.10.0):受影响

8.master(6.1.0):不受影响

9.openEuler-24.03-LTS:不受影响

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(4.19.90):否

2.openEuler-20.03-LTS-SP4:否

3.openEuler-22.03-LTS(5.10.0):否

4.openEuler-22.03-LTS-SP1(5.10.0):否

5.openEuler-22.03-LTS-SP2(5.10.0):否

6.openEuler-22.03-LTS-SP3:否

7.master(6.1.0):否

8.openEuler-22.03-LTS-Next(5.10.0):否

9.openEuler-24.03-LTS:否

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2267940 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2267940 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

4.0

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(4.19.90):受影响

2.openEuler-20.03-LTS-SP4:受影响

3.openEuler-22.03-LTS(5.10.0):受影响

4.openEuler-22.03-LTS-SP1(5.10.0):受影响

5.openEuler-22.03-LTS-SP2(5.10.0):受影响

6.openEuler-22.03-LTS-SP3:受影响

7.openEuler-22.03-LTS-Next(5.10.0):受影响

8.master(6.1.0):不受影响

9.openEuler-24.03-LTS:不受影响

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(4.19.90):否

2.openEuler-20.03-LTS-SP4:否

3.openEuler-22.03-LTS(5.10.0):否

4.openEuler-22.03-LTS-SP1(5.10.0):否

5.openEuler-22.03-LTS-SP2(5.10.0):否

6.openEuler-22.03-LTS-SP3:否

7.master(6.1.0):否

8.openEuler-22.03-LTS-Next(5.10.0):否

9.openEuler-24.03-LTS:否

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2267940 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

4.0

Vector：CVSS：2.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(4.19.90):受影响

2.openEuler-20.03-LTS-SP4:受影响

3.openEuler-22.03-LTS(5.10.0):受影响

4.openEuler-22.03-LTS-SP1(5.10.0):受影响

5.openEuler-22.03-LTS-SP2(5.10.0):受影响

6.openEuler-22.03-LTS-SP3:受影响

7.openEuler-22.03-LTS-Next(5.10.0):受影响

8.master(6.1.0):不受影响

9.openEuler-24.03-LTS:不受影响

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(4.19.90):否

2.openEuler-20.03-LTS-SP4:否

3.openEuler-22.03-LTS(5.10.0):否

4.openEuler-22.03-LTS-SP1(5.10.0):否

5.openEuler-22.03-LTS-SP2(5.10.0):否

6.openEuler-22.03-LTS-SP3:否

7.master(6.1.0):否

8.openEuler-22.03-LTS-Next(5.10.0):否

9.openEuler-24.03-LTS:否

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2267940 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

4.0

Vector：CVSS：2.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(4.19.90):受影响

2.openEuler-20.03-LTS-SP4:受影响

3.openEuler-22.03-LTS(5.10.0):受影响

4.openEuler-22.03-LTS-SP1(5.10.0):受影响

5.openEuler-22.03-LTS-SP2(5.10.0):受影响

6.openEuler-22.03-LTS-SP3:受影响

7.openEuler-22.03-LTS-Next(5.10.0):受影响

8.master(6.1.0):不受影响

9.openEuler-24.03-LTS:不受影响

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(4.19.90):否

2.openEuler-20.03-LTS-SP4:否

3.openEuler-22.03-LTS(5.10.0):否

4.openEuler-22.03-LTS-SP1(5.10.0):否

5.openEuler-22.03-LTS-SP2(5.10.0):否

6.openEuler-22.03-LTS-SP3:否

7.master(6.1.0):否

8.openEuler-22.03-LTS-Next(5.10.0):否

9.openEuler-24.03-LTS:否

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2267940 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

4.0

Vector：CVSS：2.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(4.19.90):受影响

2.openEuler-20.03-LTS-SP4:受影响

3.openEuler-22.03-LTS(5.10.0):受影响

4.openEuler-22.03-LTS-SP1(5.10.0):受影响

5.openEuler-22.03-LTS-SP2(5.10.0):受影响

6.openEuler-22.03-LTS-SP3:受影响

7.openEuler-22.03-LTS-Next(5.10.0):受影响

8.master(6.1.0):不受影响

9.openEuler-24.03-LTS:不受影响

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(4.19.90):否

2.openEuler-20.03-LTS-SP4:否

3.openEuler-22.03-LTS(5.10.0):否

4.openEuler-22.03-LTS-SP1(5.10.0):否

5.openEuler-22.03-LTS-SP2(5.10.0):否

6.openEuler-22.03-LTS-SP3:否

7.master(6.1.0):否

8.openEuler-22.03-LTS-Next(5.10.0):否

9.openEuler-24.03-LTS:否

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2267940 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

4.0

Vector：CVSS：2.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(4.19.90):受影响

2.openEuler-20.03-LTS-SP4:受影响

3.openEuler-22.03-LTS(5.10.0):受影响

4.openEuler-22.03-LTS-SP1(5.10.0):受影响

5.openEuler-22.03-LTS-SP2(5.10.0):受影响

6.openEuler-22.03-LTS-SP3:受影响

7.openEuler-22.03-LTS-Next(5.10.0):受影响

8.master(6.1.0):不受影响

9.openEuler-24.03-LTS:不受影响

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(4.19.90):否

2.openEuler-20.03-LTS-SP4:否

3.openEuler-22.03-LTS(5.10.0):否

4.openEuler-22.03-LTS-SP1(5.10.0):否

5.openEuler-22.03-LTS-SP2(5.10.0):否

6.openEuler-22.03-LTS-SP3:否

7.master(6.1.0):否

8.openEuler-22.03-LTS-Next(5.10.0):否

9.openEuler-24.03-LTS:否

一、漏洞信息

漏洞编号：[CVE-2021-47085](https://nvd.nist.gov/vuln/detail/CVE-2021-47085)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

漏洞公开时间：2024-03-05 02:15:07

漏洞创建时间：2024-03-05 03:01:38

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2021-47085

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2021-47085 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/ | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | https://bugzilla.suse.com/show_bug.cgi?id=1220951 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024030455-CVE-2021-47085-3c44@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2267940 |

| cve_search | | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 |

| cve_search | | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a |

| cve_search | | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 |

| cve_search | | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 |

| cve_search | | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b |

| cve_search | | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca |

| cve_search | | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 |

| cve_search | | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/03d00f7f1815ec00dab5035851b3de83afd054a8 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/371a874ea06f147d6ca30be43dad33683965eba6 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/83ba6ec97c74fb1a60f7779a26b6a94b28741d8a | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a5c6a13e9056d87805ba3042c208fbd4164ad22b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b2f37aead1b82a770c48b5d583f35ec22aabb61e | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59 | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| | | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2f37aead1b8 | | suse_bugzilla |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

4.0

Vector：CVSS：2.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(4.19.90):受影响

3.openEuler-22.03-LTS(5.10.0):受影响

4.openEuler-22.03-LTS-SP1(5.10.0):受影响

5.openEuler-22.03-LTS-SP2(5.10.0):受影响

7.openEuler-22.03-LTS-Next(5.10.0):受影响

8.master(6.1.0):不受影响

9.openEuler-24.03-LTS:不受影响

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(4.19.90):否

3.openEuler-22.03-LTS(5.10.0):否

4.openEuler-22.03-LTS-SP1(5.10.0):否

5.openEuler-22.03-LTS-SP2(5.10.0):否

7.master(6.1.0):否

8.openEuler-22.03-LTS-Next(5.10.0):否

9.openEuler-24.03-LTS:否