CVE-2021-47047

Summary

CVE-2021-47047 is a vulnerability affecting the Linux kernel's SPI controller in the spi-zynqmp-gqspi driver. The issue lies in the failure to correctly handle memory mapping when using DMA mode with a 44-bit address space. When dma_map_single fails, the operation should be terminated immediately, but instead, it was continuing, leading to an attempt to read from an uninitialized address. This resulted in a data abort, causing a system crash with the error message "Internal error: Oops: 96000145 [#1] PREEMPT SMP". The vulnerability can be mitigated by ensuring proper memory mapping and returning immediately when dma_map_single fails.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.