PT-2024-11267 · Linux+2 · Linux Kernel+2
Alaa Hleihel
·
Published
2021-06-10
·
Updated
2025-03-19
·
CVE-2021-47261
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue arises from the function
init cq frag buf() initializing the wrong buffer due to the get cqe() function always returning CQEs from cq->buf. This leads to accessing elements beyond the size of the current cq->buf when enlarging the CQ, resulting in a kernel panic. The fix involves getting the needed CQE by calling mlx5 frag buf get wqe() with the correct source buffer as a parameter.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Initialization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse