In the Linux kernel, the following vulnerability has been resolved:

net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound

In line 5001, if all id in the array 'lp->phy[8]' is not 0, when the
'for' end, the 'k' is 8.

At this time, the array 'lp->phy[8]' may be out of bound.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00018.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < ec5bd0aef1cec96830d0c7e06d3597d9e786cc98
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 142ead3dc70411bd5977e8c47a6d8bf22287b3f8
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < d3dedaa5a601107cfedda087209772c76e364d58
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 2c1a6a9a011d622a7c61324a97a49801ba425eff
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 77ff166909458646e66450e42909e0adacc99049
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < f059fa40f0fcc6bc7a12e0f2a2504e9a4ff74f1f
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 12f907cb11576b8cd0b1d95a16d1f10ed5bb7237
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 61217be886b5f7402843677e4be7e7e83de9cb41
Linux Linux affected
Version Status Constraints
2.6.12 affected —
0 unaffected < 2.6.12
4.4.294 unaffected ≤ 4.4.*
4.9.292 unaffected ≤ 4.9.*
4.14.257 unaffected ≤ 4.14.*
4.19.220 unaffected ≤ 4.19.*
5.4.164 unaffected ≤ 5.4.*
5.10.84 unaffected ≤ 5.10.*
5.15.7 unaffected ≤ 5.15.*
5.16 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/12f907cb11576b8cd0b1d95a16d1f10ed5bb7237 cve-icon cve-icon
https://git.kernel.org/stable/c/142ead3dc70411bd5977e8c47a6d8bf22287b3f8 cve-icon cve-icon
https://git.kernel.org/stable/c/2c1a6a9a011d622a7c61324a97a49801ba425eff cve-icon cve-icon
https://git.kernel.org/stable/c/61217be886b5f7402843677e4be7e7e83de9cb41 cve-icon cve-icon
https://git.kernel.org/stable/c/77ff166909458646e66450e42909e0adacc99049 cve-icon cve-icon
https://git.kernel.org/stable/c/d3dedaa5a601107cfedda087209772c76e364d58 cve-icon cve-icon
https://git.kernel.org/stable/c/ec5bd0aef1cec96830d0c7e06d3597d9e786cc98 cve-icon cve-icon
https://git.kernel.org/stable/c/f059fa40f0fcc6bc7a12e0f2a2504e9a4ff74f1f cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024052441-CVE-2021-47547-f3e7@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2021-47547 cve-icon
https://www.cve.org/CVERecord?id=CVE-2021-47547 cve-icon
History

Tue, 01 Apr 2025 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-129
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Mon, 04 Nov 2024 19:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H'}

 cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L'}

Mon, 04 Nov 2024 12:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-18T11:37:51.241Z

Reserved: 2024-05-24T15:02:54.829Z

Link: CVE-2021-47547

cve-icon Vulnrichment

Updated: 2024-08-04T05:39:59.807Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-24T15:15:19.570

Modified: 2025-04-01T18:41:53.850

Link: CVE-2021-47547

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-05-24T00:00:00Z

Links: CVE-2021-47547 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses