CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
15.5%
In the Linux kernel, the following vulnerability has been resolved:
nvme-rdma: destroy cm id before destroy qp to avoid use after free We
should always destroy cm_id before destroy qp to avoid to get cma event
after qp was destroyed, which may lead to use after free. In RDMA
connection establishment error flow, don’t destroy qp in cm event
handler.Just report cm_error to upper level, qp will be destroy in
nvme_rdma_alloc_queue() after destroy cm id.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 20.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-azure | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-bluefield | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-gcp | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-gkeop | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-ibm | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-iot | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-kvm | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-oracle | < any | UNKNOWN |
git.kernel.org/linus/9817d763dbe15327b9b3ff4404fa6f27f927e744 (5.15-rc2)
git.kernel.org/stable/c/9817d763dbe15327b9b3ff4404fa6f27f927e744
git.kernel.org/stable/c/d268a182c56e8361e19fb781137411643312b994
git.kernel.org/stable/c/ecf0dc5a904830c926a64feffd8e01141f89822f
launchpad.net/bugs/cve/CVE-2021-47378
nvd.nist.gov/vuln/detail/CVE-2021-47378
security-tracker.debian.org/tracker/CVE-2021-47378
www.cve.org/CVERecord?id=CVE-2021-47378