{
  "cveId": "CVE-2021-47130",
  "url": "https://patchblox.com/security/cve/CVE-2021-47130",
  "summary": "CVE-2021-47130 is fixed in linux on 1 platform, first by DEBIAN-CVE-2021-47130, released March 15, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nvmet: fix freeing unallocated p2pmem  In case p...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  nvmet: fix freeing unallocated p2pmem  In case p2p device was found but the p2p pool is empty, the nvme target is still trying to free the sgl from the p2p pool instead of the regular sgl pool and causing a crash (BUG() is called). Instead, assign the p2p_dev for the request only if it was allocated from p2p pool.  This is the crash that was caused:  [Sun May 30 19:13:53 2021] ------------[ cut here ]------------ [Sun May 30 19:13:53 2021] kernel BUG at lib/genalloc.c:518! [Sun May 30 19:13:53 2021] invalid opcode: 0000 [#1] SMP PTI ... [Sun May 30 19:13:53 2021] kernel BUG at lib/genalloc.c:518! ... [Sun May 30 19:13:53 2021] RIP: 0010:gen_pool_free_owner\u002B0xa8/0xb0 ... [Sun May 30 19:13:53 2021] Call Trace: [Sun May 30 19:13:53 2021] ------------[ cut here ]------------ [Sun May 30 19:13:53 2021]  pci_free_p2pmem\u002B0x2b/0x70 [Sun May 30 19:13:53 2021]  pci_p2pmem_free_sgl\u002B0x4f/0x80 [Sun May 30 19:13:53 2021]  nvmet_req_free_sgls\u002B0x1e/0x80 [nvmet] [Sun May 30 19:13:53 2021] kernel BUG at lib/genalloc.c:518! [Sun May 30 19:13:53 2021]  nvmet_rdma_release_rsp\u002B0x4e/0x1f0 [nvmet_rdma] [Sun May 30 19:13:53 2021]  nvmet_rdma_send_done\u002B0x1c/0x60 [nvmet_rdma]",
  "published": "2024-03-15T21:15:07Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00639,
  "epssPercentile": 0.50893,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.10.46-1",
      "fix": "DEBIAN-CVE-2021-47130",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47130",
      "released": "2024-03-15T21:15:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.10.46-1",
      "fix": "DEBIAN-CVE-2021-47130",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47130",
      "released": "2024-03-15T21:15:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.10.46-1",
      "fix": "DEBIAN-CVE-2021-47130",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47130",
      "released": "2024-03-15T21:15:07Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}