PT-2024-11117 · Linux+2 · Linux Kernel+2

Andy Gospodarek + 2 · Published 2021-04-25 · Updated 2025-01-08 · CVE-2021-47015

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the bnxt en driver in the Linux kernel, specifically with the RX consumer index logic in the error path. In the bnxt rx pkt() function, the RX buffers are expected to complete in order. However, if the RX consumer index indicates an out of order buffer completion, it means a hardware bug is encountered, and the driver will abort all remaining RX packets and reset the RX ring. The RX consumer index passed to bnxt discard rx() is incorrect, and the current index (tmp raw cons) should be used instead of the old index (raw cons). This bug can cause the system to be at the wrong index when trying to abort the next RX packet, leading to a crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-612

Related Identifiers

BDU:2025-06541

CVE-2021-47015

OESA-2024-1345

OESA-2024-1346

OPENSUSE-SU-2024_1489-1

SUSE-SU-2024:1454-1

SUSE-SU-2024:1465-1

SUSE-SU-2024:1489-1

SUSE-SU-2024:1643-1

SUSE-SU-2024:1646-1

SUSE-SU-2024:1870-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 641

• https://nvd.nist.gov/vuln/detail/CVE-2023-52458 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47049 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-46955 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47013 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47024 · Security Note
• https://osv.dev/vulnerability/CVE-2021-47015 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47015 · Vendor Advisory
• https://git.kernel.org/stable/c/e187ef83c04a5d23e68d39cfdff1a1931e29890c · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1646-1 · Vendor Advisory
• https://git.kernel.org/stable/c/4fcaad2b7dac3f16704f8118c7e481024ddbd3ed · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1454-1 · Vendor Advisory
• https://git.kernel.org/stable/c/3fbc5bc651d688fbea2a59cdc91520a2f5334d0a · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47015 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-36778 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-24855 · Security Note