Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2021-47184
HistoryApr 10, 2024 - 6:56 p.m.

CVE-2021-47184 i40e: Fix NULL ptr dereference on VSI filter sync

2024-04-1018:56:25
Linux
github.com
8
linux kernel
vulnerability resolved
null pointer dereference
vsi filter sync
patch
i40e_vsi_releasing flag
kernel oops

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

10.3%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix NULL ptr dereference on VSI filter sync

Remove the reason of null pointer dereference in sync VSI filters.
Added new I40E_VSI_RELEASING flag to signalize deleting and releasing
of VSI resources to sync this thread with sync filters subtask.
Without this patch it is possible to start update the VSI filter list
after VSI is removed, that’s causing a kernel oops.

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "41c445ff0f48",
        "lessThan": "78f2a9e831f9",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "41c445ff0f48",
        "lessThan": "87c421ab4a43",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "41c445ff0f48",
        "lessThan": "c30162da9132",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "41c445ff0f48",
        "lessThan": "f866513ead43",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "41c445ff0f48",
        "lessThan": "e91e8427a1e1",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "41c445ff0f48",
        "lessThan": "37d9e304acd9",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/net/ethernet/intel/i40e/i40e.h",
      "drivers/net/ethernet/intel/i40e/i40e_main.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "3.12"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "3.12",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "4.14.256",
        "versionType": "custom",
        "lessThanOrEqual": "4.14.*"
      },
      {
        "status": "unaffected",
        "version": "4.19.218",
        "versionType": "custom",
        "lessThanOrEqual": "4.19.*"
      },
      {
        "status": "unaffected",
        "version": "5.4.162",
        "versionType": "custom",
        "lessThanOrEqual": "5.4.*"
      },
      {
        "status": "unaffected",
        "version": "5.10.82",
        "versionType": "custom",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.5",
        "versionType": "custom",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "5.16",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/net/ethernet/intel/i40e/i40e.h",
      "drivers/net/ethernet/intel/i40e/i40e_main.c"
    ],
    "defaultStatus": "affected"
  }
]

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

10.3%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial