{
  "cveId": "CVE-2021-47451",
  "url": "https://patchblox.com/security/cve/CVE-2021-47451",
  "summary": "CVE-2021-47451 is fixed in linux on 1 platform, first by DEBIAN-CVE-2021-47451, released May 22, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: xt_IDLETIMER: fix panic that occurs w...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value  Currently, when the rule related to IDLETIMER is added, idletimer_tg timer structure is initialized by kmalloc on executing idletimer_tg_create function. However, in this process timer-\u003Etimer_type is not defined to a specific value. Thus, timer-\u003Etimer_type has garbage value and it occurs kernel panic. So, this commit fixes the panic by initializing timer-\u003Etimer_type using kzalloc instead of kmalloc.  Test commands:     # iptables -A OUTPUT -j IDLETIMER --timeout 1 --label test     $ cat /sys/class/xt_idletimer/timers/test       Killed  Splat looks like:     BUG: KASAN: user-memory-access in alarm_expires_remaining\u002B0x49/0x70     Read of size 8 at addr 0000002e8c7bc4c8 by task cat/917     CPU: 12 PID: 917 Comm: cat Not tainted 5.14.0\u002B #3 79940a339f71eb14fc81aee1757a20d5bf13eb0e     Hardware name: QEMU Standard PC (Q35 \u002B ICH9, 2009), BIOS 1.13.0-1ubuntu1.1 04/01/2014     Call Trace:      dump_stack_lvl\u002B0x6e/0x9c      kasan_report.cold\u002B0x112/0x117      ? alarm_expires_remaining\u002B0x49/0x70      __asan_load8\u002B0x86/0xb0      alarm_expires_remaining\u002B0x49/0x70      idletimer_tg_show\u002B0xe5/0x19b [xt_IDLETIMER 11219304af9316a21bee5ba9d58f76a6b9bccc6d]      dev_attr_show\u002B0x3c/0x60      sysfs_kf_seq_show\u002B0x11d/0x1f0      ? device_remove_bin_file\u002B0x20/0x20      kernfs_seq_show\u002B0xa4/0xb0      seq_read_iter\u002B0x29c/0x750      kernfs_fop_read_iter\u002B0x25a/0x2c0      ? __fsnotify_parent\u002B0x3d1/0x570      ? iov_iter_init\u002B0x70/0x90      new_sync_read\u002B0x2a7/0x3d0      ? __x64_sys_llseek\u002B0x230/0x230      ? rw_verify_area\u002B0x81/0x150      vfs_read\u002B0x17b/0x240      ksys_read\u002B0xd9/0x180      ? vfs_write\u002B0x460/0x460      ? do_syscall_64\u002B0x16/0xc0      ? lockdep_hardirqs_on\u002B0x79/0x120      __x64_sys_read\u002B0x43/0x50      do_syscall_64\u002B0x3b/0xc0      entry_SYSCALL_64_after_hwframe\u002B0x44/0xae     RIP: 0033:0x7f0cdc819142     Code: c0 e9 c2 fe ff ff 50 48 8d 3d 3a ca 0a 00 e8 f5 19 02 00 0f 1f 44 00 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 0f 05 \u003C48\u003E 3d 00 f0 ff ff 77 56 c3 0f 1f 44 00 00 48 83 ec 28 48 89 54 24     RSP: 002b:00007fff28eee5b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000     RAX: ffffffffffffffda RBX: 0000000000020000 RCX: 00007f0cdc819142     RDX: 0000000000020000 RSI: 00007f0cdc032000 RDI: 0000000000000003     RBP: 00007f0cdc032000 R08: 00007f0cdc031010 R09: 0000000000000000     R10: 0000000000000022 R11: 0000000000000246 R12: 00005607e9ee31f0     R13: 0000000000000003 R14: 0000000000020000 R15: 0000000000020000",
  "published": "2024-05-22T07:15:10Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00236,
  "epssPercentile": 0.14666,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.14.16-1",
      "fix": "DEBIAN-CVE-2021-47451",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47451",
      "released": "2024-05-22T07:15:10Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.14.16-1",
      "fix": "DEBIAN-CVE-2021-47451",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47451",
      "released": "2024-05-22T07:15:10Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.14.16-1",
      "fix": "DEBIAN-CVE-2021-47451",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47451",
      "released": "2024-05-22T07:15:10Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}