Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2021-47595— net/sched: sch_ets: don't remove idle classes from the round-robin list

Quick assessment

Affected

Linux Linux

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于从循环列表中删除空闲类

AI Predicted 8.8 Difficulty: Easy EPSS 0.24% · P15 Updated May 13, 2026

Possible ATT&CK Techniques 2 AI

T1498 · Network Denial of Service T1499 · Endpoint Denial of Service

Affected Version Matrix 5

Vendor	Product	Version Range	Status
Linux	Linux	`ae2659d2c670252759ee9c823c4e039c0e05a6f2< 81fbdd45652d8605a029e78ef14a6aaa529c4e72`	affected
		`e25bdbc7e951ae5728fee1f4c09485df113d013c< 491c1253441e2fdc8f6a6f4976e3f13440419b7a`	affected
		`de6d25924c2a8c2988c6a385990cafbe742061bf< c062f2a0b04d86c5b8c9d973bea43493eaca3d32`	affected
		`5.10.83< 5.10.88`	affected
		`5.15.6< 5.15.11`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2021-47595

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

net/sched: sch_ets: don't remove idle classes from the round-robin list

Source: CVE Program / CVE List V5

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_ets: don't remove idle classes from the round-robin list Shuang reported that the following script: 1) tc qdisc add dev ddd0 handle 10: parent 1: ets bands 8 strict 4 priomap 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 2) mausezahn ddd0 -A 10.10.10.1 -B 10.10.10.2 -c 0 -a own -b 00:c1:a0:c1:a0:00 -t udp & 3) tc qdisc change dev ddd0 handle 10: ets bands 4 strict 2 quanta 2500 2500 priomap 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 crashes systematically when line 2) is commented: list_del corruption, ffff8e028404bd30->next is LIST_POISON1 (dead000000000100) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:47! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 0 PID: 954 Comm: tc Not tainted 5.16.0-rc4+ #478 Hardware name: Red Hat KVM, BIOS 1.11.1-4.module+el8.1.0+4066+0f1aadab 04/01/2014 RIP: 0010:__list_del_entry_valid.cold.1+0x12/0x47 Code: fe ff 0f 0b 48 89 c1 4c 89 c6 48 c7 c7 08 42 1b 87 e8 1d c5 fe ff 0f 0b 48 89 fe 48 89 c2 48 c7 c7 98 42 1b 87 e8 09 c5 fe ff <0f> 0b 48 c7 c7 48 43 1b 87 e8 fb c4 fe ff 0f 0b 48 89 f2 48 89 fe RSP: 0018:ffffae46807a3888 EFLAGS: 00010246 RAX: 000000000000004e RBX: 0000000000000007 RCX: 0000000000000202 RDX: 0000000000000000 RSI: ffffffff871ac536 RDI: 00000000ffffffff RBP: ffffae46807a3a10 R08: 0000000000000000 R09: c0000000ffff7fff R10: 0000000000000001 R11: ffffae46807a36a8 R12: ffff8e028404b800 R13: ffff8e028404bd30 R14: dead000000000100 R15: ffff8e02fafa2400 FS: 00007efdc92e4480(0000) GS:ffff8e02fb600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000682f48 CR3: 00000001058be000 CR4: 0000000000350ef0 Call Trace: <TASK> ets_qdisc_change+0x58b/0xa70 [sch_ets] tc_modify_qdisc+0x323/0x880 rtnetlink_rcv_msg+0x169/0x4a0 netlink_rcv_skb+0x50/0x100 netlink_unicast+0x1a5/0x280 netlink_sendmsg+0x257/0x4d0 sock_sendmsg+0x5b/0x60 ____sys_sendmsg+0x1f2/0x260 ___sys_sendmsg+0x7c/0xc0 __sys_sendmsg+0x57/0xa0 do_syscall_64+0x3a/0x80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7efdc8031338 Code: 89 02 48 c7 c0 ff ff ff ff eb b5 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 8d 05 25 43 2c 00 8b 00 85 c0 75 17 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 41 54 41 89 d4 55 RSP: 002b:00007ffdf1ce9828 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 0000000061b37a97 RCX: 00007efdc8031338 RDX: 0000000000000000 RSI: 00007ffdf1ce9890 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000001 R09: 000000000078a940 R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000688880 R14: 0000000000000000 R15: 0000000000000000 </TASK> Modules linked in: sch_ets sch_tbf dummy rfkill iTCO_wdt iTCO_vendor_support intel_rapl_msr intel_rapl_common joydev pcspkr i2c_i801 virtio_balloon i2c_smbus lpc_ich ip_tables xfs libcrc32c crct10dif_pclmul crc32_pclmul crc32c_intel serio_raw ghash_clmulni_intel ahci libahci libata virtio_blk virtio_console virtio_net net_failover failover sunrpc dm_mirror dm_region_hash dm_log dm_mod [last unloaded: sch_ets] ---[ end trace f35878d1912655c2 ]--- RIP: 0010:__list_del_entry_valid.cold.1+0x12/0x47 Code: fe ff 0f 0b 48 89 c1 4c 89 c6 48 c7 c7 08 42 1b 87 e8 1d c5 fe ff 0f 0b 48 89 fe 48 89 c2 48 c7 c7 98 42 1b 87 e8 09 c5 fe ff <0f> 0b 48 c7 c7 48 43 1b 87 e8 fb c4 fe ff 0f 0b 48 89 f2 48 89 fe RSP: 0018:ffffae46807a3888 EFLAGS: 00010246 RAX: 000000000000004e RBX: 0000000000000007 RCX: 0000000000000202 RDX: 0000000000000000 RSI: ffffffff871ac536 RDI: 00000000ffffffff RBP: ffffae46807a3a10 R08: 0000000000000000 R09: c0000000ffff7fff R10: 0000000000000001 R11: ffffae46807a36a8 R12: ffff8e028404b800 R13: ffff8e028404bd30 R14: dead000000000100 R15: ffff8e02fafa2400 FS: 00007efdc92e4480(0000) GS:ffff8e02fb600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000 ---truncated---

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Linux kernel 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于从循环列表中删除空闲类

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Linux	Linux	ae2659d2c670252759ee9c823c4e039c0e05a6f2 ~ 81fbdd45652d8605a029e78ef14a6aaa529c4e72	-
Linux	Linux	5.10.83 ~ 5.10.88	-

II. Public POCs for CVE-2021-47595

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2021-47595

请登录查看更多情报信息。

Other References for CVE-2021-47595 (3)

https://www.cve.org/CVERecord?id=CVE-2021-47595

Same Patch Batch · Linux · 2024-06-19 · 122 CVEs total

CVE-2024-38558	10.0 CRITICAL	net: openvswitch: fix overwriting ct original tuple for ICMPv6
CVE-2024-38570	9.8 CRITICAL	gfs2: Fix potential glock use-after-free on unmount
CVE-2021-47587	9.8 CRITICAL	net: systemport: Add global locking for descriptor lifecycle
CVE-2024-38544	9.8 CRITICAL	RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
CVE-2021-47611	8.1 HIGH	mac80211: validate extended element ID is present
CVE-2024-38587	7.8 HIGH	speakup: Fix sizeof() vs ARRAY_SIZE() bug
CVE-2024-38556	7.8 HIGH	net/mlx5: Add a timeout to acquire the command queue semaphore
CVE-2024-38610	7.8 HIGH	drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()
CVE-2024-38605	7.8 HIGH	ALSA: core: Fix NULL module pointer assignment at card init
CVE-2024-38599	7.8 HIGH	jffs2: prevent xattr node from overflowing the eraseblock
CVE-2024-38592	7.8 HIGH	drm/mediatek: Init `ddp_comp` with devm_kcalloc()
CVE-2024-38564	7.8 HIGH	bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
CVE-2024-38568	7.8 HIGH	drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
CVE-2024-38572	7.8 HIGH	wifi: ath12k: fix out-of-bound access of qmi_invoke_handler()
CVE-2024-38578	7.8 HIGH	ecryptfs: Fix buffer size for tag 66 packet
CVE-2024-38580	7.8 HIGH	epoll: be better about file lifetimes
CVE-2024-38569	7.8 HIGH	drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
CVE-2024-38583	7.8 HIGH	nilfs2: fix use-after-free of timer for log writer thread
CVE-2024-38614	7.8 HIGH	openrisc: traps: Don't send signals to kernel mode threads
CVE-2024-38588	7.8 HIGH	ftrace: Fix possible use-after-free issue in ftrace_location()

Showing top 20 of 122 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Linux

Same vendor: Linux

V. Comments for CVE-2021-47595

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2021-47595— net/sched: sch_ets: don't remove idle classes from the round-robin list

Quick assessment

Possible ATT&CK Techniques 2 AI

Affected Version Matrix 5

I. Basic Information for CVE-2021-47595

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2021-47595

III. Intelligence Information for CVE-2021-47595

Other References for CVE-2021-47595 (3)

Same Patch Batch · Linux · 2024-06-19 · 122 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2021-47595

Leave a comment