Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-47138
HistoryMar 25, 2024 - 12:00 a.m.

CVE-2021-47138

2024-03-2500:00:00
ubuntu.com
ubuntu.com
3
linux kernel
cxgb4
vulnerability
memory access
register
aer error

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: cxgb4:
avoid accessing registers when clearing filters Hardware register having
the server TID base can contain invalid values when adapter is in bad state
(for example, due to AER fatal error). Reading these invalid values in the
register can lead to out-of-bound memory access. So, fix by using the saved
server TID base when clearing filters.

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%