CVE-2021-47501: i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
In the Linux kernel, the following vulnerability has been resolved:
i40e: Fix NULL pointer dereference in i40edbgdumpdesc
When trying to dump VFs VSI RX/TX descriptors using debugfs there was a crash due to NULL pointer dereference in i40edbgdumpdesc. Added a check to i40edbgdumpdesc that checks if VSI type is correct for dumping RX/TX descriptors.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47501?
CVE-2021-47501 has been classified with a moderate severity due to the potential for denial of service from a NULL pointer dereference.
How do I fix CVE-2021-47501?
To remediate CVE-2021-47501, upgrade the Linux kernel to version 5.10.223-1 or later, or to any version above 5.15.8.
Which versions of the Linux kernel are affected by CVE-2021-47501?
CVE-2021-47501 affects Linux kernel versions between 3.12 and 5.10.85, as well as several pre-release versions from 5.16-rc1 to 5.16-rc4.
What is the nature of the vulnerability in CVE-2021-47501?
CVE-2021-47501 involves a NULL pointer dereference in the i40e_dbg_dump_desc function when dumping virtual function RX/TX descriptors.
Can CVE-2021-47501 lead to a security breach?
While CVE-2021-47501 is not a direct security breach, it can result in system crashes, leading to denial of service conditions.