PT-2021-8171 · Linux+3 · Linux Kernel+3
Published
2021-11-16
·
Updated
2024-10-25
·
CVE-2021-47197
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.15.0-rc5 for upstream min debug 2021 10 14 11 06
Description
The vulnerability is related to a null pointer dereference in the
mlx5 debug cq remove() function. If mlx5 core destroy cq() fails, it proceeds with the rest of the destroy operations, and if called again by the user, it can cause an additional call to mlx5 debug cq remove(). The cq->dbg pointer is not nullified in the previous call, leading to a crash. The issue is fixed by nullifying the cq->dbg pointer after removal and only proceeding with destroy operations if the firmware returns 0 for the MLX5 CMD OP DESTROY CQ command.Recommendations
To resolve the issue, update the Linux kernel to a version that includes the fix for the null pointer dereference in
mlx5 debug cq remove(). Specifically, update to a version later than 5.15.0-rc5 for upstream min debug 2021 10 14 11 06.Note: The provided information does not specify the exact version that includes the fix, so it is recommended to update to the latest available version of the Linux kernel.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse