PT-2024-11396 · Linux+6 · Linux Kernel+6
Published
2021-09-29
·
Updated
2025-05-20
·
CVE-2021-47400
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.14.0-rc4+
Description
The vulnerability is related to the
hns3 nic net open() function in the Linux kernel, which is not allowed to be called repeatedly. However, there is no checking for this, and when doing device reset and setup tc concurrently, there is a small opportunity to call hns3 nic net open() repeatedly, causing a kernel bug by calling napi enable() twice.Recommendations
To resolve this issue, add checking for the
HNS3 NIC STATE DOWN flag and directly return when it is not set. This will prevent the repeated calling of hns3 nic net open() and subsequent kernel bug.Note: The provided information does not specify the exact version where the fix is applied, so it is recommended to update to the latest version of the Linux kernel to ensure the issue is resolved.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse