Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-46916
HistoryFeb 27, 2024 - 12:00 a.m.

CVE-2021-46916

2024-02-2700:00:00
ubuntu.com
ubuntu.com
4
linux kernel
vulnerability
resolved
ethtool loopback test
ixgbe driver
null pointer dereference
q_vector
interrupts
napi_id value
code

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.9%

In the Linux kernel, the following vulnerability has been resolved: ixgbe:
Fix NULL pointer dereference in ethtool loopback test The ixgbe driver
currently generates a NULL pointer dereference when performing the ethtool
loopback test. This is due to the fact that there isn’t a q_vector
associated with the test ring when it is setup as interrupts are not
normally added to the test rings. To address this I have added code that
will check for a q_vector before returning a napi_id value. If a q_vector
is not present it will return a value of 0.

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.9%