CVE-2021-47201

CVE-2021-47201

High · published April 10, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iavf: free q_vectors before queues in iavf_disable_vf

iavf_free_queues() clears adapter->num_active_queues, which

iavf_free_q_vectors() relies on, so swap the order of these two function

calls in iavf_disable_vf(). This resolves a panic encountered when the

interface is disabled and then later brought up again after PF

communication is restored.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.1th percentile
Published
2024-04-10T23:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 4.13, < 5.4.1625.4.162
linux/linux_kernel≥ 5.5, < 5.10.825.10.82
linux/linux_kernel≥ 5.11, < 5.15.55.15.5
linux/linux_kernelall versions—
References (8)
EPSS history
Timeline
  • 10 APR 18:56Z
    iavf: free q_vectors before queues in iavf_disable_vf
    cvelistv5