CVE-2021-47463— mm/secretmem: fix NULL page->mapping dereference in page_is_secretmem()
Possible ATT&CK Techniques 2AI
T1499.003 · Application Exhaustion Flood T1499 · Endpoint Denial of ServiceAffected Version Matrix 6
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-47463
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
mm/secretmem: fix NULL page->mapping dereference in page_is_secretmem()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix NULL page->mapping dereference in page_is_secretmem() Check for a NULL page->mapping before dereferencing the mapping in page_is_secretmem(), as the page's mapping can be nullified while gup() is running, e.g. by reclaim or truncation. BUG: kernel NULL pointer dereference, address: 0000000000000068 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 6 PID: 4173897 Comm: CPU 3/KVM Tainted: G W RIP: 0010:internal_get_user_pages_fast+0x621/0x9d0 Code: <48> 81 7a 68 80 08 04 bc 0f 85 21 ff ff 8 89 c7 be RSP: 0018:ffffaa90087679b0 EFLAGS: 00010046 RAX: ffffe3f37905b900 RBX: 00007f2dd561e000 RCX: ffffe3f37905b934 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffe3f37905b900 ... CR2: 0000000000000068 CR3: 00000004c5898003 CR4: 00000000001726e0 Call Trace: get_user_pages_fast_only+0x13/0x20 hva_to_pfn+0xa9/0x3e0 try_async_pf+0xa1/0x270 direct_page_fault+0x113/0xad0 kvm_mmu_page_fault+0x69/0x680 vmx_handle_exit+0xe1/0x5d0 kvm_arch_vcpu_ioctl_run+0xd81/0x1c70 kvm_vcpu_ioctl+0x267/0x670 __x64_sys_ioctl+0x83/0xa0 do_syscall_64+0x56/0x80 entry_SYSCALL_64_after_hwframe+0x44/0xae
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于空指针取消引用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2021-47463
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-47463
请登录查看更多情报信息。
Other References for CVE-2021-47463 (1)
Same Patch Batch · Linux · 2024-05-22 · 63 CVEs total
| CVE-2021-47496 | 9.8 CRITICAL | net/tls: Fix flipped sign in tls_err_abort() calls |
| CVE-2021-47478 | 9.1 CRITICAL | isofs: Fix out of bound access for corrupted isofs image |
| CVE-2021-47450 | 8.8 HIGH | KVM: arm64: Fix host stage-2 PGD refcount |
| CVE-2021-47433 | 8.1 HIGH | btrfs: fix abort logic in btrfs_replace_file_extents |
| CVE-2021-47446 | 7.8 HIGH | drm/msm/a4xx: fix error handling in a4xx_gpu_init() |
| CVE-2021-47493 | 7.8 HIGH | ocfs2: fix race between searching chunks and release journal_head from buffer_head |
| CVE-2021-47492 | 7.8 HIGH | mm, thp: bail out early in collapse_file for writeback page |
| CVE-2021-47494 | 7.8 HIGH | cfg80211: fix management registrations locking |
| CVE-2021-47451 | 7.8 HIGH | netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value |
| CVE-2021-47447 | 7.8 HIGH | drm/msm/a3xx: fix error handling in a3xx_gpu_init() |
| CVE-2021-47485 | 7.8 HIGH | IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields |
| CVE-2021-47483 | 7.8 HIGH | regmap: Fix possible double-free in regcache_rbtree_exit() |
| CVE-2021-47459 | 7.8 HIGH | can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv |
| CVE-2021-47461 | 7.8 HIGH | userfaultfd: fix a race between writeprotect and exit_mmap() |
| CVE-2021-47448 | 7.5 HIGH | mptcp: fix possible stall on recvmsg() |
| CVE-2021-47438 | 7.1 HIGH | net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path |
| CVE-2021-47465 | 7.1 HIGH | KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest() |
| CVE-2021-47458 | 7.1 HIGH | ocfs2: mount fails with buffer overflow in strlen |
| CVE-2021-47497 | nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells | |
| CVE-2021-47498 | dm rq: don't queue request to blk-mq during DM suspend |
Showing top 20 of 63 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
Same vendor: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
V. Comments for CVE-2021-47463
No comments yet