CVE-2021-46949

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-46949
In the Linux kernel, the following vulnerability has been resolved: sfc: farch: fix TX queue lookup in TX flush done handling We're starting from a TXQ instance number ('qid'), not a TXQ type, so efx_get_tx_queue() is inappropriate (and could return NULL, leading to panics).

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/5b1faa92289b53cad654123ed2bc8e10f6ddd4ac Patch
https://git.kernel.org/stable/c/98d91180748986bfb6dfb3e72765f3225719a647 Patch
https://git.kernel.org/stable/c/a1570985ec04116cc665b760faf666a104154170 Patch
https://git.kernel.org/stable/c/fb791572d6747ef385f628450f8d57cd132e6e5a Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

10 Apr 2024, 20:14

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: sfc: farch: corrige la búsqueda de la cola TX en el manejo finalizado del vaciado TX. Estamos comenzando desde un número de instancia TXQ ('qid'), no un tipo TXQ, por lo que efx_get_tx_queue() es inapropiado (y podría devolver NULL, lo que provocaría pánico).
CWE CWE-476
References () https://git.kernel.org/stable/c/5b1faa92289b53cad654123ed2bc8e10f6ddd4ac - () https://git.kernel.org/stable/c/5b1faa92289b53cad654123ed2bc8e10f6ddd4ac - Patch
References () https://git.kernel.org/stable/c/98d91180748986bfb6dfb3e72765f3225719a647 - () https://git.kernel.org/stable/c/98d91180748986bfb6dfb3e72765f3225719a647 - Patch
References () https://git.kernel.org/stable/c/a1570985ec04116cc665b760faf666a104154170 - () https://git.kernel.org/stable/c/a1570985ec04116cc665b760faf666a104154170 - Patch
References () https://git.kernel.org/stable/c/fb791572d6747ef385f628450f8d57cd132e6e5a - () https://git.kernel.org/stable/c/fb791572d6747ef385f628450f8d57cd132e6e5a - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

27 Feb 2024, 19:04

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-27 19:04

Updated : 2024-04-10 20:14

NVD link : CVE-2021-46949

Mitre link : CVE-2021-46949

CVE.ORG link : CVE-2021-46949

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference