PT-2024-11074 · Linux+1 · Linux Kernel+1

Aleksandr Miloserdov + 1 · Published 2021-04-15 · Updated 2025-01-08 · CVE-2021-46964

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically in the scsi: qla2xxx driver. The issue arises from the commit a6dcfe08487e, which limits interrupt vectors to the number of CPUs. This change breaks vector allocation assumptions in certain functions, leading to a crash when the driver attempts to find a queue pair in the map. The driver should allocate enough vectors to provide every CPU with its own HW queue and handle reserved interrupts. The change fixes the crash on dual-core VMs and prevents unbalanced QP allocation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-02988

CVE-2021-46964

OPENSUSE-SU-2024_0857-1

SUSE-SU-2024:0856-1

SUSE-SU-2024:0857-1

SUSE-SU-2024:0926-1

SUSE-SU-2024:1643-1

SUSE-SU-2024:1646-1

SUSE-SU-2024:1870-1

Affected Products

Linux Kernel

Suse

References · 585

• https://git.kernel.org/stable/c/f02d4086a8f36a0e1aaebf559b54cf24a177a486 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1646-1 · Vendor Advisory
• https://git.kernel.org/stable/c/0f86d66b38501e3ac66cf2d9f9f8ad6838bad0e6 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:0856-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-46964 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02988 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:1643-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-46964 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:0926-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46964 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-46964 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0857-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-46964 · Vendor Advisory
• https://git.kernel.org/stable/c/4ecd42dec858b6632c5f024fe13e9ad6c30f2734 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1870-1 · Vendor Advisory