An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458.
[
{
"signature_type": "Function",
"digest": {
"length": 1296.0,
"function_hash": "113515690155037913563174770001336733174"
},
"signature_version": "v1",
"target": {
"function": "__fixup_pi_state_owner",
"file": "kernel/futex.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@34b1a1ce1458f50ef27c54e28eb9b1947012907a",
"id": "CVE-2021-3347-0dd67579",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 513.0,
"function_hash": "111849985065242232011215653526602859914"
},
"signature_version": "v1",
"target": {
"function": "fixup_owner",
"file": "kernel/futex.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@04b79c55201f02ffd675e1231d731365e335c307",
"id": "CVE-2021-3347-2bc2fe5e",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"273187982317496364658928275011751529652",
"276151397596427202561407836244029462745",
"296325616721262031535381512168767572472",
"24016269155064285731491265813952944672",
"10399344842860171012468038250011255401"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "kernel/locking/rtmutex_common.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2156ac1934166d6deb6cd0f6ffc4c1076ec63697",
"id": "CVE-2021-3347-33f3253f",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 101.0,
"function_hash": "162073996864006246918718127775466220937"
},
"signature_version": "v1",
"target": {
"function": "rt_mutex_proxy_unlock",
"file": "kernel/locking/rtmutex.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2156ac1934166d6deb6cd0f6ffc4c1076ec63697",
"id": "CVE-2021-3347-3996312b",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"320341215252708853787019325782979689919",
"167595447661975416892387351963007821727",
"305687508129644318909291235103367301448",
"129344791133052109195154129331670675038",
"262937956623474097482018270326181438375",
"331724952138421899268510839086898964536",
"244679527362519158007625418803121251280",
"120843941897395226119729212956578773797",
"130443244663471146619557005294993983049"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "kernel/futex.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@04b79c55201f02ffd675e1231d731365e335c307",
"id": "CVE-2021-3347-4b00f908",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 1902.0,
"function_hash": "85983275933883406991216819966876461212"
},
"signature_version": "v1",
"target": {
"function": "fixup_pi_state_owner",
"file": "kernel/futex.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@12bb3f7f1b03d5913b3f9d4236a488aa7774dfe9",
"id": "CVE-2021-3347-52d53a54",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 1939.0,
"function_hash": "327148334779130430366279107626138446579"
},
"signature_version": "v1",
"target": {
"function": "futex_wait_requeue_pi",
"file": "kernel/futex.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@12bb3f7f1b03d5913b3f9d4236a488aa7774dfe9",
"id": "CVE-2021-3347-739c2423",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"263834105956983822166289856975417418265",
"29114809817336983914176006119479308269",
"338528368725793128948825671150270738225",
"200121256371516844249527689197631190073",
"124638957717280953598381136171669799408",
"114952532830241731501888341790573510325",
"46083048734819939762971604440332857701",
"219355153900146838495146088086144633453",
"217249577606147488546727023981351721427",
"32544138251085682474375356381896768712",
"241713338822395848543219712396797285831",
"80308389056329481372375651092725235648",
"269058654807878988261092506368339912627",
"21175818356093318657447614531005601369",
"302351118144043055903708787164183493645",
"132601101154835947701937887020339861612",
"255567926240765529899602285294234380507",
"259808733265545028984905515027706604750",
"331678681686677028047829220561821370647",
"170659835465660747864138768858551053874",
"209552035531064966831920995752967676617",
"187380352401942867384791072945265458074",
"17058472490163665036396909222602427322",
"96661796444074022537174690148405376343",
"322479224556090293643804118872050957272",
"126537134821140890017618012011367436890",
"236075462517826817085002682844624088310",
"34879253223137424351537920122826196194",
"324667946129920194634314412854188827024",
"109956278406009638162625243023878664502",
"182500002343551022727784455031207121206",
"120163563422872632697230004627498597468",
"234477426345541837819783076160703622531",
"97911535297348812315220691144340912382",
"334499985723275781645842228622007821487",
"151253208135491185241117105492147581854",
"74213820949545289180836633152480974650",
"332983991903622282988937649834858381754",
"23422225623268959895150963394128411979",
"23363482366353588454894051857036378431",
"55642173516021965223838757890260700791"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "kernel/futex.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@12bb3f7f1b03d5913b3f9d4236a488aa7774dfe9",
"id": "CVE-2021-3347-877a1161",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 1092.0,
"function_hash": "142886198266670215130636708225233408218"
},
"signature_version": "v1",
"target": {
"function": "wake_futex_pi",
"file": "kernel/futex.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c5cade200ab9a2a3be9e7f32a752c8d86b502ec7",
"id": "CVE-2021-3347-9124ce11",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 562.0,
"function_hash": "286682471076950688114788773284823533404"
},
"signature_version": "v1",
"target": {
"function": "fixup_owner",
"file": "kernel/futex.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@12bb3f7f1b03d5913b3f9d4236a488aa7774dfe9",
"id": "CVE-2021-3347-946fba41",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 1932.0,
"function_hash": "198057263409757795374272352103263853734"
},
"signature_version": "v1",
"target": {
"function": "fixup_pi_state_owner",
"file": "kernel/futex.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c5cade200ab9a2a3be9e7f32a752c8d86b502ec7",
"id": "CVE-2021-3347-b280110c",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"77289371383309032425287021727580909926",
"334892597012880961929069745433001914583",
"167910361807356592439525689385170130061",
"278089144279135102699179995962751458784",
"318752647951863201543571027435159543650",
"280733103697463313295875859631172212298",
"284807406488763603534556697048931555099",
"41617497875823905601799825619572676273",
"194592231036486384967649226121385770339",
"234049407949222310762189358193884261094",
"275158098409419605650411362265357988720",
"213654739921870829680803901955979227329",
"81459469116016619825722299395257259367",
"37914764838045780860068364286374249089",
"297386495603227882103378146759497195377",
"103268634289191616389587003106242090693",
"85731189714919229829974205843184819290",
"233924871596049010006249066066608008541",
"215570326310267718265542520899491697480",
"304558691850380446903613030347224215906",
"338704022118095175155289687040233952020",
"161281308510260746028357897439854832416",
"194592231036486384967649226121385770339",
"203198471326307040281051866544921325691",
"310509025055900376248598185132209152524",
"286466867628918431031411967378233914140",
"154520996638984373307735058047937369376",
"316841365714946751853560082843148414563",
"80442829300168676398319126588887905591",
"217206633822790539142913368844182738434",
"59432726458968385746958429475445698353",
"42269253805508189468344359786440106867"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "kernel/futex.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c5cade200ab9a2a3be9e7f32a752c8d86b502ec7",
"id": "CVE-2021-3347-cfd501c5",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"132212353576359580207132108690406856702",
"55988672227793180438107830891311059479",
"244122026771529835375533165754143616791",
"166203162963473555048628382004744307423"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "kernel/futex.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2156ac1934166d6deb6cd0f6ffc4c1076ec63697",
"id": "CVE-2021-3347-d6aa36e0",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"83379311553636351593703146081982291339",
"289911471606423074421378975733270733237",
"96686208498939280411002815971172731819",
"338766651428901048439882040010175909398",
"318631080996735604032407980938834825576"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "kernel/locking/rtmutex.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2156ac1934166d6deb6cd0f6ffc4c1076ec63697",
"id": "CVE-2021-3347-d7f45823",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"277696547841446050299316128790771963006",
"101107537533451650815640847995199601132",
"115162581271208781200345521999499285431",
"51012072082526540972081746163334664266",
"94613011286892000345735233480715095720",
"326327256823949410873761865611659517621",
"331002639378612335713902938281287681887",
"570924877933006778176304747452642286",
"279077211716344005101160578019887897722",
"166447846515058582747736052166524432350",
"88864922940187067070720626506787318460",
"99746421116309374202488546135233948575",
"96898120306017363035329849461750391371",
"233289239217512225928947734992927182810",
"28378800602613682390239154766405949555",
"135990521712881915955526603221964007810",
"203991696525893997486293058786271428298",
"134382814200124380347082578662335001414",
"308636226336762709767367156429249915955",
"240578047889013687481202046780188782420",
"9805658622459811992026711466709161395",
"229422005051868819768540112005340391947",
"91829195025872068220128351399906503344",
"294054589527316859882230376688319500715",
"20742470253807740435620552479245807880",
"111190485340161273643099597353625405826",
"311484847247301039108694392994162210355",
"130783198392241764045979051211405014248",
"1130404072891426559364165520840721390",
"45355317341531064560246639371770036050",
"321770519846562267143885334111396026602",
"332983991903622282988937649834858381754",
"134874418169471777179920312984975122439",
"292929451001655840653579458354093945884",
"124541674301364978156433733600978926598",
"122700454077057425567353402363786104533",
"74213820949545289180836633152480974650",
"28378800602613682390239154766405949555",
"239268973693329351446794496650353135289",
"88160930331730810177696987226318702245",
"207391404736208931911666446656132271797",
"178590677269267434442517898925464848043",
"308636226336762709767367156429249915955",
"141135455816156552100675934666676342740",
"90939628655534807682378130789175944108",
"189457668831571386176933099312645953475"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "kernel/futex.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@34b1a1ce1458f50ef27c54e28eb9b1947012907a",
"id": "CVE-2021-3347-d917a651",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 619.0,
"function_hash": "225555332708843908007511495004592859688"
},
"signature_version": "v1",
"target": {
"function": "put_pi_state",
"file": "kernel/futex.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2156ac1934166d6deb6cd0f6ffc4c1076ec63697",
"id": "CVE-2021-3347-fb43cdb4",
"deprecated": false
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-3347.json"