What is the severity of CVE-2021-47111?

The severity of CVE-2021-47111 is classified as medium, indicating a moderate risk to affected systems.

How do I fix CVE-2021-47111?

To fix CVE-2021-47111, you should update the Linux kernel to the latest stable version that addresses the vulnerability.

Which versions of the Linux kernel are affected by CVE-2021-47111?

CVE-2021-47111 affects Linux kernel versions between 5.5 and 5.10.43, as well as 5.11 to 5.12.10, and specific release candidates for 5.13.

What kind of impact does CVE-2021-47111 have on systems?

CVE-2021-47111 can potentially allow a denial of service by causing a task thread to be improperly freed.

Is CVE-2021-47111 exploitable remotely?

CVE-2021-47111 is not considered remotely exploitable as it requires local access to trigger the vulnerability.

Vulnerability/
CVE-2021-47111

high

7.8

CWE

416

15/3/2024

27/2/2025

CVE-2021-47111: xen-netback: take a reference to the RX task thread

First published: Fri Mar 15 2024(Updated: )

In the Linux kernel, the following vulnerability has been resolved: xen-netback: take a reference to the RX task thread Do this in order to prevent the task from being freed if the thread returns (which can be triggered by the frontend) before the call to kthread_stop done as part of the backend tear down. Not taking the reference will lead to a use-after-free in that scenario. Such reference was taken before but dropped as part of the rework done in 2ac061ce97f4. Reintroduce the reference taking and add a comment this time explaining why it's needed. This is XSA-374 / CVE-2021-28691.

Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Affected Software	Affected Version	How to fix
Red Hat Kernel-devel	>2ac061ce97f4
Linux Kernel	>=5.5<5.10.43
Linux Kernel	>=5.11<5.12.10
Linux Kernel	=5.13-rc1
Linux Kernel	=5.13-rc2
Linux Kernel	=5.13-rc3
Linux Kernel	=5.13-rc4
Linux Kernel	=5.13-rc5

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2021-47111?
The severity of CVE-2021-47111 is classified as medium, indicating a moderate risk to affected systems.
How do I fix CVE-2021-47111?
To fix CVE-2021-47111, you should update the Linux kernel to the latest stable version that addresses the vulnerability.
Which versions of the Linux kernel are affected by CVE-2021-47111?
CVE-2021-47111 affects Linux kernel versions between 5.5 and 5.10.43, as well as 5.11 to 5.12.10, and specific release candidates for 5.13.
What kind of impact does CVE-2021-47111 have on systems?
CVE-2021-47111 can potentially allow a denial of service by causing a task thread to be improperly freed.
Is CVE-2021-47111 exploitable remotely?
CVE-2021-47111 is not considered remotely exploitable as it requires local access to trigger the vulnerability.

agent/title
agent/weakness
agent/references
agent/type
agent/description
agent/first-publish-date
agent/author
collector/mitre-cve
source/MITRE
agent/source
agent/guess-ai
agent/software-canonical-lookup
agent/software-canonical-lookup-request
agent/severity
agent/last-modified-date
agent/remedy
agent/softwarecombine
agent/tags
agent/event
collector/nvd-api
source/NVD
vendor/linux
canonical/red hat kernel-devel
canonical/linux kernel
version/linux kernel/5.5
version/linux kernel/5.11
version/linux kernel/5.13-rc1
version/linux kernel/5.13-rc2
version/linux kernel/5.13-rc3
version/linux kernel/5.13-rc4
version/linux kernel/5.13-rc5

Frequently Asked Questions

What is the severity of CVE-2021-47111?
The severity of CVE-2021-47111 is classified as medium, indicating a moderate risk to affected systems.
How do I fix CVE-2021-47111?
To fix CVE-2021-47111, you should update the Linux kernel to the latest stable version that addresses the vulnerability.
Which versions of the Linux kernel are affected by CVE-2021-47111?
CVE-2021-47111 affects Linux kernel versions between 5.5 and 5.10.43, as well as 5.11 to 5.12.10, and specific release candidates for 5.13.
What kind of impact does CVE-2021-47111 have on systems?
CVE-2021-47111 can potentially allow a denial of service by causing a task thread to be improperly freed.
Is CVE-2021-47111 exploitable remotely?
CVE-2021-47111 is not considered remotely exploitable as it requires local access to trigger the vulnerability.

CVE-2021-47111: xen-netback: take a reference to the RX task thread

Remedy

Remedy

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2021-47111?

How do I fix CVE-2021-47111?

Which versions of the Linux kernel are affected by CVE-2021-47111?

What kind of impact does CVE-2021-47111 have on systems?

Is CVE-2021-47111 exploitable remotely?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2021-47111?

How do I fix CVE-2021-47111?

Which versions of the Linux kernel are affected by CVE-2021-47111?

What kind of impact does CVE-2021-47111 have on systems?

Is CVE-2021-47111 exploitable remotely?