CVE-2021-47086
mediumpriority · track · 22EPSS 0.002 · 13 %ileDEEURUUSEPSS · scored 2026-10-28
In the Linux kernel, the following vulnerability has been resolved: phonet/pep: refuse to enable an unbound pipe This ioctl() implicitly assumed that the socket was already bound to a valid local socket name, i.e. Phonet object. If the socket was not bound, two separate problems would occur: 1) We'd send an pipe enablement request with an invalid source object. 2) Later socket calls could BUG on the socket unexpectedly being connected yet not bound to a valid object.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (51)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2024-0549Linux Kernel: Mehrere SchwachstellenDeutsch2024-03-04csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen oder einen nicht spezifizierten Angriff durchzuführen.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (25)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2021-47086/cnnvd
- https://git.kernel.org/stable/c/0bbdd62ce9d44f3a22059b3d20a0df977d9f6d59cnnvd
- https://git.kernel.org/stable/c/311601f114859d586d5ef8833d60d3aa23282161cnnvd
- https://git.kernel.org/stable/c/48c76fc53582e7f13c1e0b11c916e503256c4d0bcnnvd
- https://git.kernel.org/stable/c/52ad5da8e316fa11e3a50b3f089aa63e4089bf52cnnvd
- https://git.kernel.org/stable/c/53ccdc73eedaf0e922c45b569b797d2796fbaafacnnvd
- https://git.kernel.org/stable/c/75a2f31520095600f650597c0ac41f48b5ba0068cnnvd
- https://git.kernel.org/stable/c/982b6ba1ce626ef87e5c29f26f2401897554f235cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan