CVE-2021-47201

low-risk
Published 2024-04-10

In the Linux kernel, the following vulnerability has been resolved: iavf: free q_vectors before queues in iavf_disable_vf iavf_free_queues() clears adapter->num_active_queues, which iavf_free_q_vectors() relies on, so swap the order of these two function calls in iavf_disable_vf(). This resolves a panic encountered when the interface is disabled and then later brought up again after PF communication is restored.

Do I need to act?

-
0.02% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (2)

Affected Vendors

Linux

References (8)

Patch https://git.kernel.org/stable/c/78638b47132244e3934dc5dc79f6372d5ce8e98c
Patch https://git.kernel.org/stable/c/89f22f129696ab53cfbc608e0a2184d0fea46ac1
Patch https://git.kernel.org/stable/c/926e8c83d4c1c2dac0026637eb0d492df876489e
Patch https://git.kernel.org/stable/c/9ef6589cac9a8c47f5544ccdf4c498093733bb3f
Patch https://git.kernel.org/stable/c/78638b47132244e3934dc5dc79f6372d5ce8e98c
Patch https://git.kernel.org/stable/c/89f22f129696ab53cfbc608e0a2184d0fea46ac1
Patch https://git.kernel.org/stable/c/926e8c83d4c1c2dac0026637eb0d492df876489e
Patch https://git.kernel.org/stable/c/9ef6589cac9a8c47f5544ccdf4c498093733bb3f
25
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 7/34 · Low