SECUFOCUSNOW
Home›CVE index›CVE-2021-47261
Review reviewHigh

CVE-2021-47261

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix initializing CQ fragments buffer The function init_cq_frag_buf() can be called to initialize the current CQ fragments buffer cq->buf, or the temporary cq->resize_buf that is filled during CQ resize operation. However, the offending commit started to use function get_cqe() for getting the CQEs, the issue with this change is that get_cqe() always returns CQEs from cq->buf, which leads us to initialize the wrong buffer, and in case of enlarging the CQ we try to access elements beyond the size of the current cq->bu...

CVSS
7.8
EPSS
0.23%
14.3% percentile
CISA KEV
Not listed
Published
2024.05.22
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.23%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix initializing CQ fragments buffer The function init_cq_frag_buf() can be called to initialize the current CQ fragments buffer cq->buf, or the temporary cq->resize_buf that is filled during CQ resize operation. However, the offending commit started to use function get_cqe() for getting the CQEs, the issue with this change is that get_cqe() always returns CQEs from cq->buf, which leads us to initialize the wrong buffer, and in case of enlarging the CQ we try to access elements beyond the size of the current cq->bu...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 388ca8be00370db132464e27f745b8a0add19fcb < 1ec2dcd680c71d0d36fa25638b327a468babd5c9, >= 388ca8be00370db132464e27f745b8a0add19fcb < e3ecd9c09fcc10cf6b2bc67e2990c397c40a8c26, >= 388ca8be00370db132464e27f745b8a0add19fcb < 91f7fdc4cc10542ca1045c06aad23365f0d067e0, >= 388ca8be00370db132464e27f745b8a0add19fcb < 3e670c54eda238cb8a1ea93538a79ae89285c1c4, >= 388ca8be00370db132464e27f745b8a0add19fcb < 2ba0aa2feebda680ecfc3c552e867cf4d1b05a3a, >= 4.17, >= 4.17 < 4.19.195, >= 4.20 < 5.4.126, >= 5.5 < 5.10.44, >= 5.11 < 5.12.11, 5.13
Fixed versions
4.19.195, 5.4.126, 5.10.44, 5.12.11

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-706