CVE-2021-46949

In the Linux kernel, the following vulnerability has been resolved: sfc: farch: fix TX queue lookup in TX flush done handling We're starting from a TXQ instance number ('qid'), not a TXQ type, so efx_get_tx_queue() is inappropriate (and could return NULL, leading to panics).

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/5b1faa92289b53cad654123ed2bc8e10f6ddd4ac	Patch
https://git.kernel.org/stable/c/98d91180748986bfb6dfb3e72765f3225719a647	Patch
https://git.kernel.org/stable/c/a1570985ec04116cc665b760faf666a104154170	Patch
https://git.kernel.org/stable/c/fb791572d6747ef385f628450f8d57cd132e6e5a	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

10 Apr 2024, 20:14

Type	Values Removed	Values Added
First Time		Linux Linux linux Kernel
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.5
CPE		cpe:2.3:o:linux:linux_kernel::::::::
CWE		CWE-476
References	~~() https://git.kernel.org/stable/c/5b1faa92289b53cad654123ed2bc8e10f6ddd4ac -~~	() https://git.kernel.org/stable/c/5b1faa92289b53cad654123ed2bc8e10f6ddd4ac - Patch
References	~~() https://git.kernel.org/stable/c/98d91180748986bfb6dfb3e72765f3225719a647 -~~	() https://git.kernel.org/stable/c/98d91180748986bfb6dfb3e72765f3225719a647 - Patch
References	~~() https://git.kernel.org/stable/c/a1570985ec04116cc665b760faf666a104154170 -~~	() https://git.kernel.org/stable/c/a1570985ec04116cc665b760faf666a104154170 - Patch
References	~~() https://git.kernel.org/stable/c/fb791572d6747ef385f628450f8d57cd132e6e5a -~~	() https://git.kernel.org/stable/c/fb791572d6747ef385f628450f8d57cd132e6e5a - Patch

27 Feb 2024, 19:04

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-02-27 19:04

Updated : 2024-04-10 20:14

NVD link : CVE-2021-46949

Mitre link : CVE-2021-46949

CVE.ORG link : CVE-2021-46949

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-476

NULL Pointer Dereference

{"id": "CVE-2021-46949", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2024-02-27T19:04:06.373", "references": [{"url": "https://git.kernel.org/stable/c/5b1faa92289b53cad654123ed2bc8e10f6ddd4ac", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/98d91180748986bfb6dfb3e72765f3225719a647", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a1570985ec04116cc665b760faf666a104154170", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/fb791572d6747ef385f628450f8d57cd132e6e5a", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-476"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsfc: farch: fix TX queue lookup in TX flush done handling\n\nWe're starting from a TXQ instance number ('qid'), not a TXQ type, so\n efx_get_tx_queue() is inappropriate (and could return NULL, leading\n to panics)."}, {"lang": "es", "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: sfc: farch: corrige la b\u00fasqueda de la cola TX en el manejo finalizado del vaciado TX. Estamos comenzando desde un n\u00famero de instancia TXQ ('qid'), no un tipo TXQ, por lo que efx_get_tx_queue() es inapropiado (y podr\u00eda devolver NULL, lo que provocar\u00eda p\u00e1nico)."}], "lastModified": "2024-04-10T20:14:05.477", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E778606-3A80-42DD-996C-5570B1192986", "versionEndExcluding": "5.10.36", "versionStartIncluding": "5.10.0"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EFB425F0-C28C-4B44-8B4C-AD512AA832DE", "versionEndExcluding": "5.11.20", "versionStartIncluding": "5.11.0"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3814FA3-8141-4313-A852-8C4212BE12AD", "versionEndExcluding": "5.12.3", "versionStartIncluding": "5.12.0"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}