SECUFOCUSNOW
Home›CVE index›CVE-2021-47541
Review reviewHigh

CVE-2021-47541

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() In mlx4_en_try_alloc_resources(), mlx4_en_copy_priv() is called and tmp->tx_cq will be freed on the error path of mlx4_en_copy_priv(). After that mlx4_en_alloc_resources() is called and there is a dereference of &tmp->tx_cq[t][i] in mlx4_en_alloc_resources(), which could lead to a use after free problem on failure of mlx4_en_copy_priv(). Fix this bug by adding a check of mlx4_en_copy_priv() This bug was found by a static analyzer. The analysis employs d...

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2024.05.25
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() In mlx4_en_try_alloc_resources(), mlx4_en_copy_priv() is called and tmp->tx_cq will be freed on the error path of mlx4_en_copy_priv(). After that mlx4_en_alloc_resources() is called and there is a dereference of &tmp->tx_cq[t][i] in mlx4_en_alloc_resources(), which could lead to a use after free problem on failure of mlx4_en_copy_priv(). Fix this bug by adding a check of mlx4_en_copy_priv() This bug was found by a static analyzer. The analysis employs d...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= ec25bc04ed8e12947738468cbe2191f1529f9e39 < be12572c5ddc8ad7453bada4eec8fa46967dc757, >= ec25bc04ed8e12947738468cbe2191f1529f9e39 < 676dc7d9b15bf8733233a2db1ec3f9091ab34275, >= ec25bc04ed8e12947738468cbe2191f1529f9e39 < e461a9816a1ac5b4aeb61621b817225b61e46a68, >= ec25bc04ed8e12947738468cbe2191f1529f9e39 < f1d43efa59f1edd3e7eca0e94559b4c6b1cd4e2b, >= ec25bc04ed8e12947738468cbe2191f1529f9e39 < 75917372eef0dbfb290ae45474314d35f97aea18, >= ec25bc04ed8e12947738468cbe2191f1529f9e39 < addad7643142f500080417dd7272f49b7a185570, >= 4.7, >= 4.7 < 4.14.257, >= 4.15 < 4.19.220, >= 4.20 < 5.4.164, >= 5.5 < 5.10.84, >= 5.11 < 5.15.7
Fixed versions
4.14.257, 4.19.220, 5.4.164, 5.10.84, 5.15.7

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416