What’s Vulnerable › Vulnerabilities

CVE-2021-47016: m68k: mvme147,mvme16x: Don't wipe PCC timer config bits

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-29 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: m68k: mvme147,mvme16x: Don't wipe PCC timer config bits Don't clear the timer 1 configuration bits when clearing the interrupt flag and counter overflow. As Michael reported, "This results in no timer interrupts being delivered after the first. Initialization then hangs in calibrate_delay as the jiffies counter is not updated." On mvme16x, enable the timer after requesting the irq, consistent with mvme147.

Affected products

• Linux kernel: from 5.2 before 5.4.119; from 5.5 before 5.10.37; from 5.11 before 5.11.21; from 5.12 before 5.12.4 — fixed in 5.10.37, 5.11.21, 5.12.4, 5.4.119

How to fix

Upgrade to a fixed version: Linux kernel 5.10.37, 5.11.21, 5.12.4, 5.4.119. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1dfb26df15fc7036a74221d43de7427f74293dae
• https://git.kernel.org/stable/c/43262178c043032e7c42d00de44c818ba05f9967
• https://git.kernel.org/stable/c/5d34225169346cab5145978d153b9ce90e9ace21
• https://git.kernel.org/stable/c/73fdeb612d25b5e105c219e05434285a45d23576
• https://git.kernel.org/stable/c/f6a90818a32058fca62cda3a2027a6a2364e1878
• https://git.kernel.org/stable/c/1dfb26df15fc7036a74221d43de7427f74293dae
• https://git.kernel.org/stable/c/43262178c043032e7c42d00de44c818ba05f9967
• https://git.kernel.org/stable/c/5d34225169346cab5145978d153b9ce90e9ace21
• https://git.kernel.org/stable/c/73fdeb612d25b5e105c219e05434285a45d23576
• https://git.kernel.org/stable/c/f6a90818a32058fca62cda3a2027a6a2364e1878

Get alerted when CVE-2021-47016 or the next vulnerability affects your stack