Analyst readout for executives and security teams
Plain-English summary
This is a Linux kernel memory leak in the sun8i-ss crypto driver when an error path is hit. The public record does not provide CVSS, impact detail, or evidence of exploitation. Business urgency depends on whether affected kernels and this driver exist in your fleet.
Executive priority
Track as routine patch management unless asset inventory shows affected kernels with the sun8i-ss driver in production. There is no sourced evidence of exploitation or high-impact behavior.
Technical view
CVE-2021-47059 fixes a result memory leak on an error path in the Linux kernel crypto sun8i-ss driver. The source bundle lists affected Linux versions including 5.10, 5.10.37, 5.11.21, 5.12.4, and 5.13, with stable kernel commits referenced as fixes.
Likely exposure
Exposure appears limited to Linux systems running affected kernel versions where the sun8i-ss crypto driver is present or enabled. The bundle does not prove all Linux deployments are exposed.
Exploitation context
No active exploitation is stated. The CVE is not listed as KEV in the provided bundle, and no cited source describes exploit activity or practical attack requirements.
Researcher notes
The record is sparse: no CVSS, CWE, exploitability notes, or detailed affected-platform matrix. Treat this as a kernel driver resource-leak fix and rely on downstream distribution advisories for precise package status.
Mitigation direction
- Identify systems running affected Linux kernel versions.
- Check whether the sun8i-ss crypto driver is present or enabled.
- Apply kernel updates containing the referenced stable fixes.
- Follow Linux distribution vendor advisories for packaged kernel remediation.
Validation and detection
- Inventory kernel versions across Linux assets.
- Confirm driver exposure through approved configuration management data.
- Map installed kernels against vendor fixed versions or referenced commits.
- Prioritize validation on systems using affected crypto hardware support.
Public sources used
Based on public source material and reviewed before publication.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2021-47059 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/1f12aaf07f61122cf5074d29714ee26f8d44b0e7CVE reference, Linux
- https://git.kernel.org/stable/c/ca065a93699f8cf3f42c60eefed73086007e928eCVE reference, Linux
- https://git.kernel.org/stable/c/50e7b39b808430ad49a637dc6fb72ca93b451b13CVE reference, Linux
- https://git.kernel.org/stable/c/1dbc6a1e25be8575d6c4114d1d2b841a796507f7CVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.