Answer in brief
CVE-2021-47153 records a High severity (CVSS 7.8) vulnerability in i2c: i801: Don't generate an interrupt on bus reset. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2021-47153 records a High severity (CVSS 7.8) vulnerability in i2c: i801: Don't generate an interrupt on bus reset. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | 3.6 | Not reported |
| Linux/Linuxgeneric | >=636752bcb5177a301d0266270661581de8624828 <f9469082126cebb7337db3992d143f5e4edfe629 || >=636752bcb5177a301d0266270661581de8624828 <09c9e79f4c10cfb6b9e0e1b4dd355232e4b5a3b3 || >=636752bcb5177a301d0266270661581de8624828 <dfa8929e117b0228a7765f5c3f5988a4a028f3c6 || >=636752bcb5177a301d0266270661581de8624828 <c70e1ba2e7e65255a0ce004f531dd90dada97a8c || >=636752bcb5177a301d0266270661581de8624828 <04cc05e3716ae31b17ecdab7bc55c8170def1b8b || >=636752bcb5177a301d0266270661581de8624828 <b523feb7e8e44652f92f3babb953a976e7ccbbef || >=636752bcb5177a301d0266270661581de8624828 <1f583d3813f204449037cd2acbfc09168171362a || >=636752bcb5177a301d0266270661581de8624828 <e4d8716c3dcec47f1557024add24e1f3c09eb24b | f9469082126cebb7337db3992d143f5e4edfe629, 09c9e79f4c10cfb6b9e0e1b4dd355232e4b5a3b3, dfa8929e117b0228a7765f5c3f5988a4a028f3c6, c70e1ba2e7e65255a0ce004f531dd90dada97a8c, 04cc05e3716ae31b17ecdab7bc55c8170def1b8b, b523feb7e8e44652f92f3babb953a976e7ccbbef, 1f583d3813f204449037cd2acbfc09168171362a, e4d8716c3dcec47f1557024add24e1f3c09eb24b |
Published upstream
Mar 25, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 4, 2026
In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Don't generate an interrupt on bus reset Now that the i2c-i801 driver supports interrupts, setting the KILL bit in a attempt to recover from a timed out transaction triggers an interrupt. Unfortunately, the interrupt handler (i801_isr) is not prepared for this situation and will try to process the interrupt as if it was signaling the end of a successful transaction. In the case of a block transaction, this can result in an out-of-range memory access. This condition was reproduced several times by syzbot: https://syzkaller.appspot.com/bug?extid=ed71512d469895b5b34e https://syzkaller.appspot.com/bug?extid=8c8dedc0ba9e03f6c79e https://syzkaller.appspot.com/bug?extid=c8ff0b6d6c73d81b610e https://syzkaller.appspot.com/bug?extid=33f6c360821c399d69eb https://syzkaller.appspot.com/bug?extid=be15dc0b1933f04b043a https://syzkaller.appspot.com/bug?extid=b4d3fd1dfd53e90afd79 So disable interrupts while trying to reset the bus. Interrupts will be enabled again for the following transaction.
Quoted source text, attributed separately from HOL analysis.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | 3.6 | Not reported |
| Linux/Linuxgeneric | >=636752bcb5177a301d0266270661581de8624828 <f9469082126cebb7337db3992d143f5e4edfe629 || >=636752bcb5177a301d0266270661581de8624828 <09c9e79f4c10cfb6b9e0e1b4dd355232e4b5a3b3 || >=636752bcb5177a301d0266270661581de8624828 <dfa8929e117b0228a7765f5c3f5988a4a028f3c6 || >=636752bcb5177a301d0266270661581de8624828 <c70e1ba2e7e65255a0ce004f531dd90dada97a8c || >=636752bcb5177a301d0266270661581de8624828 <04cc05e3716ae31b17ecdab7bc55c8170def1b8b || >=636752bcb5177a301d0266270661581de8624828 <b523feb7e8e44652f92f3babb953a976e7ccbbef || >=636752bcb5177a301d0266270661581de8624828 <1f583d3813f204449037cd2acbfc09168171362a || >=636752bcb5177a301d0266270661581de8624828 <e4d8716c3dcec47f1557024add24e1f3c09eb24b | f9469082126cebb7337db3992d143f5e4edfe629, 09c9e79f4c10cfb6b9e0e1b4dd355232e4b5a3b3, dfa8929e117b0228a7765f5c3f5988a4a028f3c6, c70e1ba2e7e65255a0ce004f531dd90dada97a8c, 04cc05e3716ae31b17ecdab7bc55c8170def1b8b, b523feb7e8e44652f92f3babb953a976e7ccbbef, 1f583d3813f204449037cd2acbfc09168171362a, e4d8716c3dcec47f1557024add24e1f3c09eb24b |
Published upstream
Mar 25, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 4, 2026
In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Don't generate an interrupt on bus reset Now that the i2c-i801 driver supports interrupts, setting the KILL bit in a attempt to recover from a timed out transaction triggers an interrupt. Unfortunately, the interrupt handler (i801_isr) is not prepared for this situation and will try to process the interrupt as if it was signaling the end of a successful transaction. In the case of a block transaction, this can result in an out-of-range memory access. This condition was reproduced several times by syzbot: https://syzkaller.appspot.com/bug?extid=ed71512d469895b5b34e https://syzkaller.appspot.com/bug?extid=8c8dedc0ba9e03f6c79e https://syzkaller.appspot.com/bug?extid=c8ff0b6d6c73d81b610e https://syzkaller.appspot.com/bug?extid=33f6c360821c399d69eb https://syzkaller.appspot.com/bug?extid=be15dc0b1933f04b043a https://syzkaller.appspot.com/bug?extid=b4d3fd1dfd53e90afd79 So disable interrupts while trying to reset the bus. Interrupts will be enabled again for the following transaction.
Quoted source text, attributed separately from HOL analysis.