An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3347.json"
[
{
"id": "CVE-2021-3347-0498fe5f",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"290710939053592555752488357828805870402",
"290912993573038905055144178247915037617",
"104324065060999771019587040192817737937",
"300864528489565616528082269836530343291",
"316649841270374291734849371136799207682",
"102886946116451991834499543473434480154",
"127528436456894949066303995083306862764",
"114491232362942150085912476442967174901",
"271061416291379381328857102466890170165",
"21503603418807763208918824129091178041",
"225540364621465930570421059989934210684",
"99188214362323945247486513663231694931",
"204035994032147362383030996850403849660",
"247832017373421524399802721281207616605",
"214729676677307807254302684716008661543",
"85262881099799190704478049930911665741",
"50350371278458434685713677968072535441",
"85319288453983123816897086029097820144",
"285784236016734854441268042358428475482",
"338029852495231924732188584170248232409",
"77239521391966630717792831099173747061",
"206046714277025694258197672212128010071",
"288580133552778151871333652261290297286",
"42545417214380706528708598334169946464",
"113992412698046871323968128440476768350",
"50441730180993846442319888516173447125",
"243245979248779132635705902168665338597",
"167763716067282256424567461600409858651",
"266823049228700568228327506855791021904",
"34792998459037169857635229324863437376",
"34083725044598810162054543554357021824",
"162269120822484116383204635989382721819",
"281940835785876685369477987839082240150",
"3938435176639736667302184518576110285",
"277783178911670472971496101647553850907",
"104220310312383763461197661063482307596",
"35052041138281098785140707262436285761",
"293882951491755859304693669135153273999",
"89977480708933840206976259230202673809",
"294697906014283891618458933854390925304",
"126033722764488285723138699921216522974",
"247494804680710983588929402360374384798",
"232954546815886829195194500993202622236",
"190305294657568119055352725006955315989",
"79554842139959577434903226926333476844",
"185993422349857027033224863026687159716",
"322238946608796115314250911398026357743",
"296087256531866457714744297487764736393",
"80983707781646636973924530354802077955",
"276508536839979484250084562784672114680",
"2058078969563291571753045904509102001",
"270737009796401888811918935249327766827",
"333022808686208048774589387267332928689",
"286218445145565568499681906952340013340"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@f2dac39d93987f7de1e20b3988c8685523247ae2",
"target": {
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-0dd67579",
"signature_type": "Function",
"digest": {
"function_hash": "113515690155037913563174770001336733174",
"length": 1296.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@34b1a1ce1458f50ef27c54e28eb9b1947012907a",
"target": {
"function": "__fixup_pi_state_owner",
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-2b1b06ae",
"signature_type": "Function",
"digest": {
"function_hash": "84663124699261802767654944470305586619",
"length": 613.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@6ccc84f917d33312eb2846bd7b567639f585ad6d",
"target": {
"function": "put_pi_state",
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-2bc2fe5e",
"signature_type": "Function",
"digest": {
"function_hash": "111849985065242232011215653526602859914",
"length": 513.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@04b79c55201f02ffd675e1231d731365e335c307",
"target": {
"function": "fixup_owner",
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-33f3253f",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"273187982317496364658928275011751529652",
"276151397596427202561407836244029462745",
"296325616721262031535381512168767572472",
"24016269155064285731491265813952944672",
"10399344842860171012468038250011255401"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2156ac1934166d6deb6cd0f6ffc4c1076ec63697",
"target": {
"file": "kernel/locking/rtmutex_common.h"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-3996312b",
"signature_type": "Function",
"digest": {
"function_hash": "162073996864006246918718127775466220937",
"length": 101.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2156ac1934166d6deb6cd0f6ffc4c1076ec63697",
"target": {
"function": "rt_mutex_proxy_unlock",
"file": "kernel/locking/rtmutex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-4b00f908",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"320341215252708853787019325782979689919",
"167595447661975416892387351963007821727",
"305687508129644318909291235103367301448",
"129344791133052109195154129331670675038",
"262937956623474097482018270326181438375",
"331724952138421899268510839086898964536",
"244679527362519158007625418803121251280",
"120843941897395226119729212956578773797",
"130443244663471146619557005294993983049"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@04b79c55201f02ffd675e1231d731365e335c307",
"target": {
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-52d53a54",
"signature_type": "Function",
"digest": {
"function_hash": "85983275933883406991216819966876461212",
"length": 1902.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@12bb3f7f1b03d5913b3f9d4236a488aa7774dfe9",
"target": {
"function": "fixup_pi_state_owner",
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-636ad13b",
"signature_type": "Function",
"digest": {
"function_hash": "13170331101461047478738936919637614501",
"length": 1589.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@f2dac39d93987f7de1e20b3988c8685523247ae2",
"target": {
"function": "fixup_pi_state_owner",
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-739c2423",
"signature_type": "Function",
"digest": {
"function_hash": "327148334779130430366279107626138446579",
"length": 1939.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@12bb3f7f1b03d5913b3f9d4236a488aa7774dfe9",
"target": {
"function": "futex_wait_requeue_pi",
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-877a1161",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"263834105956983822166289856975417418265",
"29114809817336983914176006119479308269",
"338528368725793128948825671150270738225",
"200121256371516844249527689197631190073",
"124638957717280953598381136171669799408",
"114952532830241731501888341790573510325",
"46083048734819939762971604440332857701",
"219355153900146838495146088086144633453",
"217249577606147488546727023981351721427",
"32544138251085682474375356381896768712",
"241713338822395848543219712396797285831",
"80308389056329481372375651092725235648",
"269058654807878988261092506368339912627",
"21175818356093318657447614531005601369",
"302351118144043055903708787164183493645",
"132601101154835947701937887020339861612",
"255567926240765529899602285294234380507",
"259808733265545028984905515027706604750",
"331678681686677028047829220561821370647",
"170659835465660747864138768858551053874",
"209552035531064966831920995752967676617",
"187380352401942867384791072945265458074",
"17058472490163665036396909222602427322",
"96661796444074022537174690148405376343",
"322479224556090293643804118872050957272",
"126537134821140890017618012011367436890",
"236075462517826817085002682844624088310",
"34879253223137424351537920122826196194",
"324667946129920194634314412854188827024",
"109956278406009638162625243023878664502",
"182500002343551022727784455031207121206",
"120163563422872632697230004627498597468",
"234477426345541837819783076160703622531",
"97911535297348812315220691144340912382",
"334499985723275781645842228622007821487",
"151253208135491185241117105492147581854",
"74213820949545289180836633152480974650",
"332983991903622282988937649834858381754",
"23422225623268959895150963394128411979",
"23363482366353588454894051857036378431",
"55642173516021965223838757890260700791"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@12bb3f7f1b03d5913b3f9d4236a488aa7774dfe9",
"target": {
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-8b83b077",
"signature_type": "Function",
"digest": {
"function_hash": "48737615591135121170506414312383880552",
"length": 2189.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@34b1a1ce1458f50ef27c54e28eb9b1947012907a",
"target": {
"function": "futex_lock_pi",
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-9124ce11",
"signature_type": "Function",
"digest": {
"function_hash": "142886198266670215130636708225233408218",
"length": 1092.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c5cade200ab9a2a3be9e7f32a752c8d86b502ec7",
"target": {
"function": "wake_futex_pi",
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-946fba41",
"signature_type": "Function",
"digest": {
"function_hash": "286682471076950688114788773284823533404",
"length": 562.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@12bb3f7f1b03d5913b3f9d4236a488aa7774dfe9",
"target": {
"function": "fixup_owner",
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-b280110c",
"signature_type": "Function",
"digest": {
"function_hash": "198057263409757795374272352103263853734",
"length": 1932.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c5cade200ab9a2a3be9e7f32a752c8d86b502ec7",
"target": {
"function": "fixup_pi_state_owner",
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-cfd501c5",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"77289371383309032425287021727580909926",
"334892597012880961929069745433001914583",
"167910361807356592439525689385170130061",
"278089144279135102699179995962751458784",
"318752647951863201543571027435159543650",
"280733103697463313295875859631172212298",
"284807406488763603534556697048931555099",
"41617497875823905601799825619572676273",
"194592231036486384967649226121385770339",
"234049407949222310762189358193884261094",
"275158098409419605650411362265357988720",
"213654739921870829680803901955979227329",
"81459469116016619825722299395257259367",
"37914764838045780860068364286374249089",
"297386495603227882103378146759497195377",
"103268634289191616389587003106242090693",
"85731189714919229829974205843184819290",
"233924871596049010006249066066608008541",
"215570326310267718265542520899491697480",
"304558691850380446903613030347224215906",
"338704022118095175155289687040233952020",
"161281308510260746028357897439854832416",
"194592231036486384967649226121385770339",
"203198471326307040281051866544921325691",
"310509025055900376248598185132209152524",
"286466867628918431031411967378233914140",
"154520996638984373307735058047937369376",
"316841365714946751853560082843148414563",
"80442829300168676398319126588887905591",
"217206633822790539142913368844182738434",
"59432726458968385746958429475445698353",
"42269253805508189468344359786440106867"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c5cade200ab9a2a3be9e7f32a752c8d86b502ec7",
"target": {
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-d6aa36e0",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"132212353576359580207132108690406856702",
"55988672227793180438107830891311059479",
"244122026771529835375533165754143616791",
"166203162963473555048628382004744307423"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2156ac1934166d6deb6cd0f6ffc4c1076ec63697",
"target": {
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-d7f45823",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"83379311553636351593703146081982291339",
"289911471606423074421378975733270733237",
"96686208498939280411002815971172731819",
"338766651428901048439882040010175909398",
"318631080996735604032407980938834825576"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2156ac1934166d6deb6cd0f6ffc4c1076ec63697",
"target": {
"file": "kernel/locking/rtmutex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-d917a651",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"277696547841446050299316128790771963006",
"101107537533451650815640847995199601132",
"115162581271208781200345521999499285431",
"51012072082526540972081746163334664266",
"94613011286892000345735233480715095720",
"326327256823949410873761865611659517621",
"331002639378612335713902938281287681887",
"570924877933006778176304747452642286",
"279077211716344005101160578019887897722",
"166447846515058582747736052166524432350",
"88864922940187067070720626506787318460",
"99746421116309374202488546135233948575",
"96898120306017363035329849461750391371",
"233289239217512225928947734992927182810",
"28378800602613682390239154766405949555",
"135990521712881915955526603221964007810",
"203991696525893997486293058786271428298",
"134382814200124380347082578662335001414",
"308636226336762709767367156429249915955",
"240578047889013687481202046780188782420",
"9805658622459811992026711466709161395",
"229422005051868819768540112005340391947",
"91829195025872068220128351399906503344",
"294054589527316859882230376688319500715",
"20742470253807740435620552479245807880",
"111190485340161273643099597353625405826",
"311484847247301039108694392994162210355",
"130783198392241764045979051211405014248",
"1130404072891426559364165520840721390",
"45355317341531064560246639371770036050",
"321770519846562267143885334111396026602",
"332983991903622282988937649834858381754",
"134874418169471777179920312984975122439",
"292929451001655840653579458354093945884",
"124541674301364978156433733600978926598",
"122700454077057425567353402363786104533",
"74213820949545289180836633152480974650",
"28378800602613682390239154766405949555",
"239268973693329351446794496650353135289",
"88160930331730810177696987226318702245",
"207391404736208931911666446656132271797",
"178590677269267434442517898925464848043",
"308636226336762709767367156429249915955",
"141135455816156552100675934666676342740",
"90939628655534807682378130789175944108",
"189457668831571386176933099312645953475"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@34b1a1ce1458f50ef27c54e28eb9b1947012907a",
"target": {
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-ef02fc09",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"302753374551755132743740654210436407641",
"331828666821739085426510172795921356825",
"263671998121301152816907975598866280491",
"254433158625225767777330773265931927436",
"155198324470448076686676951233230340015",
"91108922072109628880135107303072140130",
"194498550008329779622640321145485032738",
"35227616663492385841094509549284726447",
"293636226811086589710756366955693104110",
"38828040182603679449558321807221296579",
"2783634136449326299275910336149908567",
"93466339820947428590358844966152892749"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@6ccc84f917d33312eb2846bd7b567639f585ad6d",
"target": {
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-fb43cdb4",
"signature_type": "Function",
"digest": {
"function_hash": "225555332708843908007511495004592859688",
"length": 619.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2156ac1934166d6deb6cd0f6ffc4c1076ec63697",
"target": {
"function": "put_pi_state",
"file": "kernel/futex.c"
},
"deprecated": false
},
{
"id": "CVE-2021-3347-fe4d8667",
"signature_type": "Function",
"digest": {
"function_hash": "23579929404004312842886638926298545812",
"length": 1969.0
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@34b1a1ce1458f50ef27c54e28eb9b1947012907a",
"target": {
"function": "futex_wait_requeue_pi",
"file": "kernel/futex.c"
},
"deprecated": false
}
]