{
  "cveId": "CVE-2021-47346",
  "url": "https://patchblox.com/security/cve/CVE-2021-47346",
  "summary": "CVE-2021-47346 is fixed in linux on 1 platform, first by DEBIAN-CVE-2021-47346, released May 21, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  coresight: tmc-etf: Fix global-out-of-bounds in...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()  commit 6f755e85c332 (\u0022coresight: Add helper for inserting synchronization packets\u0022) removed trailing \u0027\\0\u0027 from barrier_pkt array and updated the call sites like etb_update_buffer() to have proper checks for barrier_pkt size before read but missed updating tmc_update_etf_buffer() which still reads barrier_pkt past the array size resulting in KASAN out-of-bounds bug. Fix this by adding a check for barrier_pkt size before accessing like it is done in etb_update_buffer().   BUG: KASAN: global-out-of-bounds in tmc_update_etf_buffer\u002B0x4b8/0x698  Read of size 4 at addr ffffffd05b7d1030 by task perf/2629   Call trace:   dump_backtrace\u002B0x0/0x27c   show_stack\u002B0x20/0x2c   dump_stack\u002B0x11c/0x188   print_address_description\u002B0x3c/0x4a4   __kasan_report\u002B0x140/0x164   kasan_report\u002B0x10/0x18   __asan_report_load4_noabort\u002B0x1c/0x24   tmc_update_etf_buffer\u002B0x4b8/0x698   etm_event_stop\u002B0x248/0x2d8   etm_event_del\u002B0x20/0x2c   event_sched_out\u002B0x214/0x6f0   group_sched_out\u002B0xd0/0x270   ctx_sched_out\u002B0x2ec/0x518   __perf_event_task_sched_out\u002B0x4fc/0xe6c   __schedule\u002B0x1094/0x16a0   preempt_schedule_irq\u002B0x88/0x170   arm64_preempt_schedule_irq\u002B0xf0/0x18c   el1_irq\u002B0xe8/0x180   perf_event_exec\u002B0x4d8/0x56c   setup_new_exec\u002B0x204/0x400   load_elf_binary\u002B0x72c/0x18c0   search_binary_handler\u002B0x13c/0x420   load_script\u002B0x500/0x6c4   search_binary_handler\u002B0x13c/0x420   exec_binprm\u002B0x118/0x654   __do_execve_file\u002B0x77c/0xba4   __arm64_compat_sys_execve\u002B0x98/0xac   el0_svc_common\u002B0x1f8/0x5e0   el0_svc_compat_handler\u002B0x84/0xb0   el0_svc_compat\u002B0x10/0x50   The buggy address belongs to the variable:   barrier_pkt\u002B0x10/0x40   Memory state around the buggy address:   ffffffd05b7d0f00: fa fa fa fa 04 fa fa fa fa fa fa fa 00 00 00 00   ffffffd05b7d0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  \u003Effffffd05b7d1000: 00 00 00 00 00 00 fa fa fa fa fa fa 00 00 00 03                                       ^   ffffffd05b7d1080: fa fa fa fa 00 02 fa fa fa fa fa fa 03 fa fa fa   ffffffd05b7d1100: fa fa fa fa 00 00 00 00 05 fa fa fa fa fa fa fa  ==================================================================",
  "published": "2024-05-21T15:15:21Z",
  "severity": "high",
  "cvss": 7.1,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
  "epss": 0.00251,
  "epssPercentile": 0.16555,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.14.6-1",
      "fix": "DEBIAN-CVE-2021-47346",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47346",
      "released": "2024-05-21T15:15:21Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.14.6-1",
      "fix": "DEBIAN-CVE-2021-47346",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47346",
      "released": "2024-05-21T15:15:21Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.14.6-1",
      "fix": "DEBIAN-CVE-2021-47346",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47346",
      "released": "2024-05-21T15:15:21Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}