PT-2024-8922 · Linux+7 · Linux Kernel+7

Greg Kroah-Hartman + 5 · Published 2022-05-10 · Updated 2025-01-14 · CVE-2021-47501

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a NULL pointer dereference in the i40e dbg dump desc function when trying to dump VFs VSI RX/TX descriptors using debugfs. This can cause a crash due to the NULL pointer dereference. A check has been added to i40e dbg dump desc to ensure the VSI type is correct for dumping RX/TX descriptors.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2024-10590

CESA-2022_1988

CVE-2021-47501

OPENSUSE-SU-2024_2185-1

OPENSUSE-SU-2024_2189-1

RHSA-2022:1988

RHSA-2022_1988

SUSE-SU-2024:2008-1

SUSE-SU-2024:2010-1

SUSE-SU-2024:2011-1

SUSE-SU-2024:2019-1

SUSE-SU-2024:2185-1

SUSE-SU-2024:2189-1

SUSE-SU-2024:2190-1

SUSE-SU-2024:2892-1

SUSE-SU-2024:2901-1

SUSE-SU-2024:2940-1

USN-7159-1

USN-7159-2

USN-7159-3

USN-7159-4

USN-7159-5

USN-7183-1

USN-7184-1

USN-7185-1

USN-7185-2

USN-7195-1

USN-7195-2

Affected Products

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Suse

Ubuntu

References · 1821

• https://ubuntu.com/security/notices/USN-7159-4 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43884 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2010-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7185-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-48943 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-45006 · Vendor Advisory
• https://git.kernel.org/stable/c/16431e442db248ecd8aa9457cf0a656f1885f56e · Patch
• https://ubuntu.com/security/CVE-2024-43892 · Vendor Advisory
• https://git.kernel.org/stable/c/e5b7fb2198abc50058f1a29c395b004f76ab1c83 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2190-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35904 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-44940 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36941 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47086 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52507 · Vendor Advisory