CVE-2021-47184CWE-476

CVE-2021-47184

High · published April 10, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix NULL ptr dereference on VSI filter sync

Remove the reason of null pointer dereference in sync VSI filters.

Added new I40E_VSI_RELEASING flag to signalize deleting and releasing

of VSI resources to sync this thread with sync filters subtask.

Without this patch it is possible to start update the VSI filter list

after VSI is removed, that's causing a kernel oops.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00250 · 15.5th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-04-10T23:15Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel≥ 3.12, < 4.14.2564.14.256
linux/linux_kernel≥ 4.15, < 4.19.2184.19.218
linux/linux_kernel≥ 4.20, < 5.4.1625.4.162
linux/linux_kernel≥ 5.5, < 5.10.825.10.82
linux/linux_kernel≥ 5.11, < 5.15.55.15.5
linux/linux_kernelall versions—
References (12)
EPSS history
Timeline
  • 10 APR 18:56Z
    i40e: Fix NULL ptr dereference on VSI filter sync
    cvelistv5