In the Linux kernel, the following vulnerability has been resolved:

i2c: i801: Don't generate an interrupt on bus reset

Now that the i2c-i801 driver supports interrupts, setting the KILL bit
in a attempt to recover from a timed out transaction triggers an
interrupt. Unfortunately, the interrupt handler (i801_isr) is not
prepared for this situation and will try to process the interrupt as
if it was signaling the end of a successful transaction. In the case
of a block transaction, this can result in an out-of-range memory
access.

This condition was reproduced several times by syzbot:
https://syzkaller.appspot.com/bug?extid=ed71512d469895b5b34e
https://syzkaller.appspot.com/bug?extid=8c8dedc0ba9e03f6c79e
https://syzkaller.appspot.com/bug?extid=c8ff0b6d6c73d81b610e
https://syzkaller.appspot.com/bug?extid=33f6c360821c399d69eb
https://syzkaller.appspot.com/bug?extid=be15dc0b1933f04b043a
https://syzkaller.appspot.com/bug?extid=b4d3fd1dfd53e90afd79

So disable interrupts while trying to reset the bus. Interrupts will
be enabled again for the following transaction.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00006.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
636752bcb5177a301d0266270661581de8624828 affected < f9469082126cebb7337db3992d143f5e4edfe629
636752bcb5177a301d0266270661581de8624828 affected < 09c9e79f4c10cfb6b9e0e1b4dd355232e4b5a3b3
636752bcb5177a301d0266270661581de8624828 affected < dfa8929e117b0228a7765f5c3f5988a4a028f3c6
636752bcb5177a301d0266270661581de8624828 affected < c70e1ba2e7e65255a0ce004f531dd90dada97a8c
636752bcb5177a301d0266270661581de8624828 affected < 04cc05e3716ae31b17ecdab7bc55c8170def1b8b
636752bcb5177a301d0266270661581de8624828 affected < b523feb7e8e44652f92f3babb953a976e7ccbbef
636752bcb5177a301d0266270661581de8624828 affected < 1f583d3813f204449037cd2acbfc09168171362a
636752bcb5177a301d0266270661581de8624828 affected < e4d8716c3dcec47f1557024add24e1f3c09eb24b
Linux Linux affected
Version Status Constraints
3.6 affected —
0 unaffected < 3.6
4.4.271 unaffected ≤ 4.4.*
4.9.271 unaffected ≤ 4.9.*
4.14.235 unaffected ≤ 4.14.*
4.19.193 unaffected ≤ 4.19.*
5.4.124 unaffected ≤ 5.4.*
5.10.42 unaffected ≤ 5.10.*
5.12.9 unaffected ≤ 5.12.*
5.13 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.5.1.rt7.346.el8_10 cpe:/a:redhat:enterprise_linux:8::nfv RHSA-2024:3627 2024-06-05T00:00:00Z
kernel-0:4.18.0-553.5.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:3618 2024-06-05T00:00:00Z

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Redhat Subscribe
Enterprise Linux Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/04cc05e3716ae31b17ecdab7bc55c8170def1b8b cve-icon cve-icon
https://git.kernel.org/stable/c/09c9e79f4c10cfb6b9e0e1b4dd355232e4b5a3b3 cve-icon cve-icon
https://git.kernel.org/stable/c/1f583d3813f204449037cd2acbfc09168171362a cve-icon cve-icon
https://git.kernel.org/stable/c/b523feb7e8e44652f92f3babb953a976e7ccbbef cve-icon cve-icon
https://git.kernel.org/stable/c/c70e1ba2e7e65255a0ce004f531dd90dada97a8c cve-icon cve-icon
https://git.kernel.org/stable/c/dfa8929e117b0228a7765f5c3f5988a4a028f3c6 cve-icon cve-icon
https://git.kernel.org/stable/c/e4d8716c3dcec47f1557024add24e1f3c09eb24b cve-icon cve-icon
https://git.kernel.org/stable/c/f9469082126cebb7337db3992d143f5e4edfe629 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024032501-CVE-2021-47153-8c75@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2021-47153 cve-icon
https://www.cve.org/CVERecord?id=CVE-2021-47153 cve-icon
History

Tue, 16 Sep 2025 16:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Tue, 05 Nov 2024 17:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.2, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H'}

 cvssV3_1

{'score': 6, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T07:05:15.278Z

Reserved: 2024-03-04T18:12:48.846Z

Link: CVE-2021-47153

cve-icon Vulnrichment

Updated: 2024-08-04T05:24:39.990Z

cve-icon NVD

Status : Analyzed

Published: 2024-03-25T09:15:09.407

Modified: 2025-09-16T16:24:46.947

Link: CVE-2021-47153

cve-icon Redhat

Severity : Low

Publid Date: 2024-03-25T00:00:00Z

Links: CVE-2021-47153 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses