Vulnerability · Published Feb 27, 2024 · Assigned by Linux
CVE-2021-46909ARM: footbridge: fix PCI interrupt mapping
Medium 5.5
In plain English
A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
In the Linux kernel, the following vulnerability has been resolved: ARM: footbridge: fix PCI interrupt mapping Since commit 30fdfb929e82 ("PCI: Add a call to pci_assign_irq() in pci_device_probe()"), the PCI code will call the IRQ mapping function whenever a PCI driver is probed. If these are marked as __init, this causes an oops if a PCI driver is loaded or bound after the kernel has initialised.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | bpftool | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-abi-stablelists | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-core | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-cross-headers | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-debug | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-debug-core | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-debug-devel | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-debug-modules | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-debug-modules-extra | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-devel | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-doc | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-headers | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-modules | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-modules-extra | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-rt | 4.18.0-553.8.1.rt7.349.el8_10 | ALSA-2024:4352 |
| AlmaLinux:8 | kernel-rt-core | 4.18.0-553.8.1.rt7.349.el8_10 | ALSA-2024:4352 |
| AlmaLinux:8 | kernel-rt-debug | 4.18.0-553.8.1.rt7.349.el8_10 | ALSA-2024:4352 |
| AlmaLinux:8 | kernel-rt-debug-core | 4.18.0-553.8.1.rt7.349.el8_10 | ALSA-2024:4352 |
| AlmaLinux:8 | kernel-rt-debug-devel | 4.18.0-553.8.1.rt7.349.el8_10 | ALSA-2024:4352 |
| AlmaLinux:8 | kernel-rt-debug-kvm | 4.18.0-553.8.1.rt7.349.el8_10 | ALSA-2024:4352 |
| AlmaLinux:8 | kernel-rt-debug-modules | 4.18.0-553.8.1.rt7.349.el8_10 | ALSA-2024:4352 |
| AlmaLinux:8 | kernel-rt-debug-modules-extra | 4.18.0-553.8.1.rt7.349.el8_10 | ALSA-2024:4352 |
| AlmaLinux:8 | kernel-rt-devel | 4.18.0-553.8.1.rt7.349.el8_10 | ALSA-2024:4352 |
| AlmaLinux:8 | kernel-rt-kvm | 4.18.0-553.8.1.rt7.349.el8_10 | ALSA-2024:4352 |
| AlmaLinux:8 | kernel-rt-modules | 4.18.0-553.8.1.rt7.349.el8_10 | ALSA-2024:4352 |
| AlmaLinux:8 | kernel-rt-modules-extra | 4.18.0-553.8.1.rt7.349.el8_10 | ALSA-2024:4352 |
| AlmaLinux:8 | kernel-tools | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-tools-libs | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-tools-libs-devel | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-zfcpdump | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-zfcpdump-core | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-zfcpdump-devel | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-zfcpdump-modules | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | kernel-zfcpdump-modules-extra | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | perf | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| AlmaLinux:8 | python3-perf | 4.18.0-553.8.1.el8_10 | ALSA-2024:4211 |
| Debian:12 | linux | 5.10.38-1 | DEBIAN-CVE-2021-46909 |
| Debian:13 | linux | 5.10.38-1 | DEBIAN-CVE-2021-46909 |
| Debian:14 | linux | 5.10.38-1 | DEBIAN-CVE-2021-46909 |
| Rocky Linux:8 | kernel | 0:4.18.0-553.8.1.el8_10 | RLSA-2024:4211 |
| Rocky Linux:8 | kernel-rt | 0:4.18.0-553.8.1.rt7.349.el8_10 | RLSA-2024:4352 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2021-46909 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2021-46909 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 30fdfb929e82450bbf3d0e0aba56efbc29b52b52 – before 532747fd5c7aaa17ee5cf79f3e947c31eb0e35cf30fdfb929e82450bbf3d0e0aba56efbc29b52b52 – before 2643da6aa57920d9159a1a579fb04f89a2b0d29a30fdfb929e82450bbf3d0e0aba56efbc29b52b52 – before 871b569a3e67f570df9f5ba195444dc7c621293b30fdfb929e82450bbf3d0e0aba56efbc29b52b52 – before 1fc087fdb98d556b416c82ed6e3964a30885f47a30fdfb929e82450bbf3d0e0aba56efbc29b52b52 – before c3efce8cc9807339633ee30e39882f4c8626ee1d30fdfb929e82450bbf3d0e0aba56efbc29b52b52 – before 30e3b4f256b4e366a61658c294f6a21b8626dda7 |
| Linux | Linux | 4.13 |
References
- https://git.kernel.org/stable/c/532747fd5c7aaa17ee5cf79f3e947c31eb0e35cf
- https://git.kernel.org/stable/c/2643da6aa57920d9159a1a579fb04f89a2b0d29a
- https://git.kernel.org/stable/c/871b569a3e67f570df9f5ba195444dc7c621293b
- https://git.kernel.org/stable/c/1fc087fdb98d556b416c82ed6e3964a30885f47a
- https://git.kernel.org/stable/c/c3efce8cc9807339633ee30e39882f4c8626ee1d
- https://git.kernel.org/stable/c/30e3b4f256b4e366a61658c294f6a21b8626dda7