CVE-2021-47140

🗓️ 25 Mar 2024 09:07:38Reported by LinuxType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 65 Views🌐 WEB

Linux kernel fixed vulnerability in AMD IOMMU switc

Reporter	Title	Published	Views	Family All 14
AstraLinux	Astra Linux - уязвимость в linux-5.10	3 May 202623:59	–	astralinux
CNNVD	Linux kernel 安全漏洞	25 Mar 202400:00	–	cnnvd
Cvelist	CVE-2021-47140 iommu/amd: Clear DMA ops when switching domain	25 Mar 202409:07	–	cvelist
Debian CVE	CVE-2021-47140	25 Mar 202409:07	–	debiancve
NVD	CVE-2021-47140	25 Mar 202409:15	–	nvd
OSV	DEBIAN-CVE-2021-47140	25 Mar 202409:15	–	osv
OSV	UBUNTU-CVE-2021-47140	25 Mar 202409:15	–	osv
Positive Technologies	PT-2024-11190 · Linux +1 · Linux Kernel +1	18 May 202100:00	–	ptsecurity
Tenable Nessus	RHEL 7 : kernel (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2021-47140	5 Mar 202500:00	–	nessus

NVD

Vulners

CNA

Node

linux linux_kernelRange5.11–5.12.9

linux linux_kernelMatch5.13rc1

linux linux_kernelMatch5.13rc2

linux linux_kernelMatch5.13rc3

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/iommu/amd/iommu.c"
    ],
    "versions": [
      {
        "version": "08a27c1c3ecf5e1da193ce5f8fc97c3be16e75f0",
        "lessThan": "f3f2cf46291a693eab21adb94171b0128c2a9ec1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "08a27c1c3ecf5e1da193ce5f8fc97c3be16e75f0",
        "lessThan": "d6177a6556f853785867e2ec6d5b7f4906f0d809",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/iommu/amd/iommu.c"
    ],
    "versions": [
      {
        "version": "5.11",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.11",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.12.9",
        "lessThanOrEqual": "5.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.13",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/f3f2cf46291a693eab21adb94171b0128c2a9ec1
git	www.git.kernel.org/stable/c/d6177a6556f853785867e2ec6d5b7f4906f0d809

Parameter	Position	Path	Description	CWE
0000:00:05.0	path	/sys/sys/bus/pci/drivers/e1000e/unbind	Sysfs unbind path used to switch PCI device between IOMMU and direct DMA (vulnerability context).	CWE-476
0000:00:05.0	path	/sys/bus/pci/devices/0000:00:05.0/iommu_group/type	Sysfs type switch for an IOMMU group, related to changing default domain which can trigger unsafe DMA ops.	CWE-476
identity	path	/sys/bus/pci/devices/0000:00:05.0/iommu_group/type	Sysfs type switch for an IOMMU group, related to changing default domain which can trigger unsafe DMA ops.	CWE-476
0000:00:05.0	path	/sys/sys/bus/pci/drivers/e1000e/bind	Sysfs bind path used after switching IOMMU domain, part of the attack surface described.	CWE-476

11 May 2026 13:48Current

5Medium risk

Vulners AI Score5

CVSS 3.15.3

EPSS0.00047

SSVC

CWE-476