Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-47280: In the Linux kernel, the following vulnerability has been resolved: drm: Fix use-after-free read in drm_getunique() CVE-2021-47277: In the Linux kernel, the following vulnerability has been resolved: kvm: avoid speculation-based attacks from out-of-range memslot accesses CVE-2021-47276: In the Linux kernel, the following vulnerability has been resolved: ftrace: Do not blindly read the ip address in ftrace_bug() CVE-2021-47274: In the Linux kernel, the following vulnerability has been resolved: tracing: Correct the length check which causes memory corruption CVE-2021-47260: In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential NULL dereference in nfs_get_client() CVE-2021-47259: In the Linux kernel, the following vulnerability has been resolved: NFS: Fix use-after-free in nfs4_init_client() CVE-2021-47258: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix error handling of scsi_host_alloc() CVE-2021-47256: In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: make sure wait for page writeback in memory_failure CVE-2021-47254: In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2_glock_shrink_scan CVE-2021-47250: In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix memory leak in netlbl_cipsov4_add_std CVE-2021-47249: In the Linux kernel, the following vulnerability has been resolved: net: rds: fix memory leak in rds_recvmsg CVE-2021-47248: In the Linux kernel, the following vulnerability has been resolved: udp: fix race between close() and udp_abort() CVE-2021-47245: In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: Fix out of bounds when parsing TCP options CVE-2021-47238: In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix memory leak in ip_mc_add1_src CVE-2021-47236: In the Linux kernel, the following vulnerability has been resolved: net: cdc_eem: fix tx fixup skb leak CVE-2021-47223: In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix vlan tunnel dst null pointer dereference CVE-2021-47222: In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix vlan tunnel dst refcnt when egressing CVE-2021-47177: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix sysfs leak in alloc_iommu() CVE-2021-47171: In the Linux kernel, the following vulnerability has been resolved: net: usb: fix memory leak in smsc75xx_bind CVE-2021-47168: In the Linux kernel, the following vulnerability has been resolved: NFS: fix an incorrect limit in filelayout_decode_layout() CVE-2021-47166: In the Linux kernel, the following vulnerability has been resolved: NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce() CVE-2021-47162: In the Linux kernel, the following vulnerability has been resolved: tipc: skb_linearize the head skb when reassembling msgs CVE-2021-47146: In the Linux kernel, the following vulnerability has been resolved: mld: fix panic in mld_newpack() CVE-2021-47145: In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUG_ON in link_to_fixup_dir CVE-2021-47142: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix a use-after-free CVE-2021-47118: In the Linux kernel, the following vulnerability has been resolved: pid: take a reference when initializing `cad_pid` CVE-2021-47117: In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed CVE-2021-47078: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Clear all QP fields if creation failed CVE-2021-47055: In the Linux kernel, the following vulnerability has been resolved: mtd: require write permissions for locking and badblock ioctls CVE-2021-47054: In the Linux kernel, the following vulnerability has been resolved: bus: qcom: Put child node before return CVE-2021-47013: In the Linux kernel, the following vulnerability has been resolved: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send CVE-2021-47006: In the Linux kernel, the following vulnerability has been resolved: ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook CVE-2021-46992: In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: avoid overflows in nft_hash_buckets() CVE-2021-46988: In the Linux kernel, the following vulnerability has been resolved: userfaultfd: release page in error path to avoid BUG_ON CVE-2021-46985: In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: Fix a memory leak in an error handling path CVE-2021-46960: In the Linux kernel, the following vulnerability has been resolved: cifs: Return correct error code from smb2_get_enc_key CVE-2021-46959: In the Linux kernel, the following vulnerability has been resolved: spi: Fix use-after-free with devm_spi_alloc_* CVE-2021-46955: In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets CVE-2021-46953: In the Linux kernel, the following vulnerability has been resolved: ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure CVE-2021-46950: In the Linux kernel, the following vulnerability has been resolved: md/raid1: properly indicate failure when ending a failed write request This patch addresses a data corruption bug in raid1 arrays using bitmaps. Without this fix, the bitmap bits for the failed I/O end up being cleared. Since we are in the failure leg of raid1_end_write_request, the request either needs to be retried (R1BIO_WriteError) or failed (R1BIO_Degraded). CVE-2021-46939: In the Linux kernel, the following vulnera
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.238-182.421.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.238-182.421.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-aarch64 | 0:4.14.238-182.421.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.238-182.421.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.238-182.421.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.238-182.421.amzn2 |
| Amazon Linux · 2 | kernel-livepatch-4.14.238-182.421 | 0:1.0-0.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.238-182.421.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.238-182.421.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.238-182.421.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.238-182.421.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.238-182.421.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.238-182.421.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.238-182.421.amzn2 |
Vulnerabilities 51
-
Critical 9.8
net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
In the Linux kernel, the following vulnerability has been resolved: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send In emac_mac_tx_buf_send, it calls emac_tx_fill_tpd(..,skb,..). If some error happens in emac_tx_fill_tpd(), the skb will be fre…
-
Critical 9.8
tipc: skb_linearize the head skb when reassembling msgs
In the Linux kernel, the following vulnerability has been resolved: tipc: skb_linearize the head skb when reassembling msgs It's not a good idea to append the frag skb to a skb's frag_list if the frag_list already has skbs from elsewhere, such as this skb was…
-
Critical 9.8
NFS: fix an incorrect limit in filelayout_decode_layout()
In the Linux kernel, the following vulnerability has been resolved: NFS: fix an incorrect limit in filelayout_decode_layout() The "sizeof(struct nfs_fh)" is two bytes too large and could lead to memory corruption. It should be NFS_MAXFHSIZE because that's the…
-
High 8.2
openvswitch: fix stack OOB read while fragmenting IPv4 packets
In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 pa…
-
High 8.2
netfilter: synproxy: Fix out of bounds when parsing TCP options
In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: Fix out of bounds when parsing TCP options The TCP option parser in synproxy (synproxy_parse_options) could read one byte out of bounds. When the length is 1, the executi…
-
High 7.8
md/raid1: properly indicate failure when ending a failed write request
In the Linux kernel, the following vulnerability has been resolved: md/raid1: properly indicate failure when ending a failed write request This patch addresses a data corruption bug in raid1 arrays using bitmaps. Without this fix, the bitmap bits for the fail…
-
High 7.8
netfilter: nftables: avoid overflows in nft_hash_buckets()
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: avoid overflows in nft_hash_buckets() Number of buckets being stored in 32bit variables, we have to ensure that no overflows occur in nft_hash_buckets() syzbot injected a…
-
High 7.8
RDMA/rxe: Clear all QP fields if creation failed
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Clear all QP fields if creation failed rxe_qp_do_cleanup() relies on valid pointer values in QP for the properly created ones, but in case rxe_qp_from_init() failed it was filled wi…
-
High 7.8
drm/amdgpu: Fix a use-after-free
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix a use-after-free looks like we forget to set ttm->sg to NULL. Hit panic below [ 1235.844104] general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b7b4b: 0…
-
High 7.8
net: bridge: fix vlan tunnel dst refcnt when egressing
In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix vlan tunnel dst refcnt when egressing The egress tunnel code uses dst_clone() and directly sets the result which is wrong because the entry might have 0 refcnt or be already …
-
High 7.8
udp: fix race between close() and udp_abort()
In the Linux kernel, the following vulnerability has been resolved: udp: fix race between close() and udp_abort() Kaustubh reported and diagnosed a panic in udp_lib_lookup(). The root cause is udp_abort() racing with close(). Both racing functions acquire the…
-
High 7.8
gfs2: Fix use-after-free in gfs2_glock_shrink_scan
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2_glock_shrink_scan The GLF_LRU flag is checked under lru_lock in gfs2_glock_remove_from_lru() to remove the glock from the lru list in __gfs2_glock_put(). On t…
-
High 7.8
NFS: Fix use-after-free in nfs4_init_client()
In the Linux kernel, the following vulnerability has been resolved: NFS: Fix use-after-free in nfs4_init_client() KASAN reports a use-after-free when attempting to mount two different exports through two different NICs that belong to the same server. Olga was…
-
High 7.8
tracing: Correct the length check which causes memory corruption
In the Linux kernel, the following vulnerability has been resolved: tracing: Correct the length check which causes memory corruption We've suffered from severe kernel crashes due to memory corruption on our production environment, like, Call Trace: [1640542.5…
-
High 7.5
cifs: Return correct error code from smb2_get_enc_key
In the Linux kernel, the following vulnerability has been resolved: cifs: Return correct error code from smb2_get_enc_key Avoid a warning if the error percolates back up: [440700.376476] CIFS VFS: \\otters.example.com crypt_message: Could not get encryption k…
-
High 7.1
mtd: require write permissions for locking and badblock ioctls
In the Linux kernel, the following vulnerability has been resolved: mtd: require write permissions for locking and badblock ioctls MEMLOCK, MEMUNLOCK and OTPLOCK modify protection bits. Thus require write permission. Depending on the hardware MEMLOCK might ev…
-
Medium 5.5
tracing: Restructure trace_clock_global() to never block
In the Linux kernel, the following vulnerability has been resolved: tracing: Restructure trace_clock_global() to never block It was reported that a fix to the ring buffer recursion detection would cause a hung machine when performing suspend / resume testing.…
-
Medium 5.5
ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook
In the Linux kernel, the following vulnerability has been resolved: ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook The commit 1879445dfa7b ("perf/core: Set event's default ::overflow_handler()") set a default event->overfl…
-
Medium 5.5
net: ipv4: fix memory leak in ip_mc_add1_src
In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix memory leak in ip_mc_add1_src BUG: memory leak unreferenced object 0xffff888101bc4c00 (size 32): comm "syz-executor527", pid 360, jiffies 4294807421 (age 19.329s) hex dump (fir…
-
Unscored —
Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-m…
-
Unscored —
Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjac…
-
Unscored —
An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial …
-
Unscored —CVE-2021-32399 Public exploit
net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.
-
Unscored —CVE-2021-33034 Public exploit
In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-…
-
Unscored —CVE-2021-33624 Public exploit
In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confus…
-
Unscored —
A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user …
-
Unscored —
A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls i…
-
Unscored —
HID: usbhid: fix info leak in hid_submit_ctrl
In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fix info leak in hid_submit_ctrl In hid_submit_ctrl(), the way of calculating the report length doesn't take into account that report->size can be zero. When running the syzkalle…
-
Unscored —
dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails
In the Linux kernel, the following vulnerability has been resolved: dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails When loading a device-mapper table for a request-based mapped device, and the allocation/initialization of the bl…
-
Unscored —
ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure
In the Linux kernel, the following vulnerability has been resolved: ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure When failing the driver probe because of invalid firmware properties, the GTDT driver unmaps the interrupt that it mappe…
-
Unscored —
spi: Fix use-after-free with devm_spi_alloc_*
In the Linux kernel, the following vulnerability has been resolved: spi: Fix use-after-free with devm_spi_alloc_* We can't rely on the contents of the devres list during spi_unregister_controller(), as the list is already torn down at the time we perform devr…
-
Unscored —
ACPI: scan: Fix a memory leak in an error handling path
In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: Fix a memory leak in an error handling path If 'acpi_device_set_name()' fails, we must free 'acpi_device_bus_id->bus_id' or there is a (potential) memory leak.
-
Unscored —
userfaultfd: release page in error path to avoid BUG_ON
In the Linux kernel, the following vulnerability has been resolved: userfaultfd: release page in error path to avoid BUG_ON Consider the following sequence of events: 1. Userspace issues a UFFD ioctl, which ends up calling into shmem_mfill_atomic_pte(). We su…
-
Unscored —
bus: qcom: Put child node before return
In the Linux kernel, the following vulnerability has been resolved: bus: qcom: Put child node before return Put child node before return to fix potential reference count leak. Generally, the reference count of child is incremented and decremented automaticall…
-
Unscored —
ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed
In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed We got follow bug_on when run fsstress with injecting IO fault: [130747.323114] kernel BUG at fs/ext4/extents_status.c:…
-
Unscored —
pid: take a reference when initializing `cad_pid`
In the Linux kernel, the following vulnerability has been resolved: pid: take a reference when initializing `cad_pid` During boot, kernel_init_freeable() initializes `cad_pid` to the init task's struct pid. Later on, we may change `cad_pid` via a sysctl, and …
-
Unscored —
btrfs: do not BUG_ON in link_to_fixup_dir
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUG_ON in link_to_fixup_dir While doing error injection testing I got the following panic kernel BUG at fs/btrfs/tree-log.c:1862! invalid opcode: 0000 [#1] SMP NOPTI CPU: 1 PID:…
-
Unscored —
mld: fix panic in mld_newpack()
In the Linux kernel, the following vulnerability has been resolved: mld: fix panic in mld_newpack() mld_newpack() doesn't allow to allocate high order page, only order-0 allocation is allowed. If headroom size is too large, a kernel panic could occur in skb_p…
-
Unscored —
NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()
In the Linux kernel, the following vulnerability has been resolved: NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce() The value of mirror->pg_bytes_written should only be updated after a successful attempt to flush out the requests on th…
-
Unscored —
net: usb: fix memory leak in smsc75xx_bind
In the Linux kernel, the following vulnerability has been resolved: net: usb: fix memory leak in smsc75xx_bind Syzbot reported memory leak in smsc75xx_bind(). The problem was is non-freed memory in case of errors after memory allocation. backtrace: [<ffffffff…
-
Unscored —
iommu/vt-d: Fix sysfs leak in alloc_iommu()
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix sysfs leak in alloc_iommu() iommu_device_sysfs_add() is called before, so is has to be cleaned on subsequent errors.
-
Unscored —
net: bridge: fix vlan tunnel dst null pointer dereference
In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix vlan tunnel dst null pointer dereference This patch fixes a tunnel_dst null pointer dereference due to lockless access in the tunnel egress path. When deleting a vlan tunnel …
-
Unscored —
net: cdc_eem: fix tx fixup skb leak
In the Linux kernel, the following vulnerability has been resolved: net: cdc_eem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in eem_tx_fixup(), if skb_copy_expand() failed, it return NULL, usbnet_start_xmit() will have no chance to free or…
-
Unscored —
net: rds: fix memory leak in rds_recvmsg
In the Linux kernel, the following vulnerability has been resolved: net: rds: fix memory leak in rds_recvmsg Syzbot reported memory leak in rds. The problem was in unputted refcount in case of error. int rds_recvmsg(struct socket *sock, struct msghdr *msg, si…
-
Unscored —
net: ipv4: fix memory leak in netlbl_cipsov4_add_std
In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix memory leak in netlbl_cipsov4_add_std Reported by syzkaller: BUG: memory leak unreferenced object 0xffff888105df7000 (size 64): comm "syz-executor842", pid 360, jiffies 4294824…
-
Unscored —
mm/memory-failure: make sure wait for page writeback in memory_failure
In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: make sure wait for page writeback in memory_failure Our syzkaller trigger the "BUG_ON(!list_empty(&inode->i_wb_list))" in clear_inode: kernel BUG at fs/inode.c:519! Interna…
-
Unscored —
scsi: core: Fix error handling of scsi_host_alloc()
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix error handling of scsi_host_alloc() After device is initialized via device_initialize(), or its name is set via dev_set_name(), the device has to be freed via put_device(). Ot…
-
Unscored —
NFS: Fix a potential NULL dereference in nfs_get_client()
In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential NULL dereference in nfs_get_client() None of the callers are expecting NULL returns from nfs_get_client() so this code will lead to an Oops. It's better to return an erro…
-
Unscored —
ftrace: Do not blindly read the ip address in ftrace_bug()
In the Linux kernel, the following vulnerability has been resolved: ftrace: Do not blindly read the ip address in ftrace_bug() It was reported that a bug on arm64 caused a bad ip address to be used for updating into a nop in ftrace_init(), but the error path …
-
Unscored —
kvm: avoid speculation-based attacks from out-of-range memslot accesses
In the Linux kernel, the following vulnerability has been resolved: kvm: avoid speculation-based attacks from out-of-range memslot accesses KVM's mechanism for accessing guest memory translates a guest physical address (gpa) to a host virtual address using th…
-
Unscored —
drm: Fix use-after-free read in drm_getunique()
In the Linux kernel, the following vulnerability has been resolved: drm: Fix use-after-free read in drm_getunique() There is a time-of-check-to-time-of-use error in drm_getunique() due to retrieving file_priv->master prior to locking the device's master mutex…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2020-26558.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-0129.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-29650.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-32399.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-33034.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-33624.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-3564.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-3573.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-46906.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-46938.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-46939.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-46950.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-46953.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-46955.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-46959.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-46960.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-46985.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-46988.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-46992.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-47006.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-47013.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-47054.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-47055.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-47078.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-47117.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-47118.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-47142.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-47145.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-47146.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-47162.html