PT-2024-11253 · Linux+2 · Linux Kernel+2
Published
2021-06-09
·
Updated
2025-06-18
·
CVE-2021-47246
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.12.0+
Description
The vulnerability is related to the net/mlx5e driver in the Linux kernel. When adding a hairpin flow, a firmware-side send queue is created for the peer net device, which claims some host memory pages for its internal ring buffer. If the peer net device is removed/unbound before the hairpin flow is deleted, then the send queue is not destroyed, leading to a stack trace on PCI device remove. This results in a leak of a command resource and failed page reclamation.
Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for the net/mlx5e driver. Specifically, versions prior to 5.12.0+ are affected, so updating to 5.12.0 or later should resolve the issue.
As a temporary workaround, consider disabling the
mlx5 reclaim startup pages() function until a patch is available. However, this is not a recommended long-term solution and may have unintended consequences.It is also recommended to restrict access to the vulnerable module
mlx5 core to minimize the risk of exploitation.Note: The provided information does not include specific details about the number of potentially affected devices or real-world incidents where this issue was exploited.
Fix
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse