CVE-2021-47647
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
26/02/2025
Last modified:
23/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
clk: qcom: ipq8074: fix PCI-E clock oops<br />
<br />
Fix PCI-E clock related kernel oops that are caused by a missing clock<br />
parent.<br />
<br />
pcie0_rchng_clk_src has num_parents set to 2 but only one parent is<br />
actually set via parent_hws, it should also have "XO" defined.<br />
This will cause the kernel to panic on a NULL pointer in<br />
clk_core_get_parent_by_index().<br />
<br />
So, to fix this utilize clk_parent_data to provide gcc_xo_gpll0 parent<br />
data.<br />
Since there is already an existing static const char * const gcc_xo_gpll0[]<br />
used to provide the same parents via parent_names convert those users to<br />
clk_parent_data as well.<br />
<br />
Without this earlycon is needed to even catch the OOPS as it will reset<br />
the board before serial is initialized with the following:<br />
<br />
[ 0.232279] Unable to handle kernel paging request at virtual address 0000a00000000000<br />
[ 0.232322] Mem abort info:<br />
[ 0.239094] ESR = 0x96000004<br />
[ 0.241778] EC = 0x25: DABT (current EL), IL = 32 bits<br />
[ 0.244908] SET = 0, FnV = 0<br />
[ 0.250377] EA = 0, S1PTW = 0<br />
[ 0.253236] FSC = 0x04: level 0 translation fault<br />
[ 0.256277] Data abort info:<br />
[ 0.261141] ISV = 0, ISS = 0x00000004<br />
[ 0.264262] CM = 0, WnR = 0<br />
[ 0.267820] [0000a00000000000] address between user and kernel address ranges<br />
[ 0.270954] Internal error: Oops: 96000004 [#1] SMP<br />
[ 0.278067] Modules linked in:<br />
[ 0.282751] CPU: 1 PID: 1 Comm: swapper/0 Not tainted 5.15.10 #0<br />
[ 0.285882] Hardware name: Xiaomi AX3600 (DT)<br />
[ 0.292043] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)<br />
[ 0.296299] pc : clk_core_get_parent_by_index+0x68/0xec<br />
[ 0.303067] lr : __clk_register+0x1d8/0x820<br />
[ 0.308273] sp : ffffffc01111b7d0<br />
[ 0.312438] x29: ffffffc01111b7d0 x28: 0000000000000000 x27: 0000000000000040<br />
[ 0.315919] x26: 0000000000000002 x25: 0000000000000000 x24: ffffff8000308800<br />
[ 0.323037] x23: ffffff8000308850 x22: ffffff8000308880 x21: ffffff8000308828<br />
[ 0.330155] x20: 0000000000000028 x19: ffffff8000309700 x18: 0000000000000020<br />
[ 0.337272] x17: 000000005cc86990 x16: 0000000000000004 x15: ffffff80001d9d0a<br />
[ 0.344391] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000006<br />
[ 0.351508] x11: 0000000000000003 x10: 0101010101010101 x9 : 0000000000000000<br />
[ 0.358626] x8 : 7f7f7f7f7f7f7f7f x7 : 6468626f5e626266 x6 : 17000a3a403c1b06<br />
[ 0.365744] x5 : 061b3c403a0a0017 x4 : 0000000000000000 x3 : 0000000000000001<br />
[ 0.372863] x2 : 0000a00000000000 x1 : 0000000000000001 x0 : ffffff8000309700<br />
[ 0.379982] Call trace:<br />
[ 0.387091] clk_core_get_parent_by_index+0x68/0xec<br />
[ 0.389351] __clk_register+0x1d8/0x820<br />
[ 0.394210] devm_clk_hw_register+0x5c/0xe0<br />
[ 0.398030] devm_clk_register_regmap+0x44/0x8c<br />
[ 0.402198] qcom_cc_really_probe+0x17c/0x1d0<br />
[ 0.406711] qcom_cc_probe+0x34/0x44<br />
[ 0.411224] gcc_ipq8074_probe+0x18/0x30<br />
[ 0.414869] platform_probe+0x68/0xe0<br />
[ 0.418776] really_probe.part.0+0x9c/0x30c<br />
[ 0.422336] __driver_probe_device+0x98/0x144<br />
[ 0.426329] driver_probe_device+0x44/0x11c<br />
[ 0.430842] __device_attach_driver+0xb4/0x120<br />
[ 0.434836] bus_for_each_drv+0x68/0xb0<br />
[ 0.439349] __device_attach+0xb0/0x170<br />
[ 0.443081] device_initial_probe+0x14/0x20<br />
[ 0.446901] bus_probe_device+0x9c/0xa4<br />
[ 0.451067] device_add+0x35c/0x834<br />
[ 0.454886] of_device_add+0x54/0x64<br />
[ 0.458360] of_platform_device_create_pdata+0xc0/0x100<br />
[ 0.462181] of_platform_bus_create+0x114/0x370<br />
[ 0.467128] of_platform_bus_create+0x15c/0x370<br />
[ 0.471641] of_platform_populate+0x50/0xcc<br />
[ 0.476155] of_platform_default_populate_init+0xa8/0xc8<br />
[ 0.480324] do_one_initcall+0x50/0x1b0<br />
[ 0.485877] kernel_init_freeable+0x234/0x29c<br />
[ 0.489436] kernel_init+0x24/0x120<br />
[ 0.493948] ret_from_fork+0x10/0x20<br />
[ 0.497253] Code: d50323bf d65f03c0 f94002a2 b4000302 (f9400042)<br />
[ 0.501079] ---[ end trace 4ca7e1129da2abce ]---
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.9 (including) | 5.10.110 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11 (including) | 5.15.33 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 5.16.19 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.17 (including) | 5.17.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/41e360fa73a4c2f5b78f5ded78a5375b08c206a5
- https://git.kernel.org/stable/c/5a5576ad405c3c89fc9afb245c4dcc3e412b0aa9
- https://git.kernel.org/stable/c/8b89c9e68a01a19a1dd689a42aa65d545e931899
- https://git.kernel.org/stable/c/bf8f5182b8f59309809b41c1d1730ed9ca6134b1
- https://git.kernel.org/stable/c/d02b3d4a8c525068bc5cfb4341e0023d8eb82ace



