CVE-2021-47201
MediumIn the Linux kernel, the following vulnerability has been resolved: iavf: free q_vectors before queues in iavf_disable_vf iavf_free_queues() clears adapter->num_active_queues, which iavf_free_q_vectors() relies on, so swap the order of these two function calls in iavf_disable_vf(). This resolves a panic encountered when the interface is disabled and then later brought up again after PF communication is restored.
CVSS 3.1 score
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
The following references provide additional information about CVE-2021-47201 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/78638b47132244e3934dc5dc79f6372d5ce8e98c
-
PatchKernel patch commithttps://git.kernel.org/stable/c/89f22f129696ab53cfbc608e0a2184d0fea46ac1
-
PatchKernel patch commithttps://git.kernel.org/stable/c/926e8c83d4c1c2dac0026637eb0d492df876489e
Frequently asked questions
-
What is CVE-2021-47201?
CVE-2021-47201 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 . CVE-2021-47201 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2021-47201?
CVE-2021-47201 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. -
Is there a patch available for CVE-2021-47201?
No patch is currently available for CVE-2021-47201. Monitor the NIST NVD and your Linux distribution's security advisories for updates.
-
Is CVE-2021-47201 actively exploited?
No — CVE-2021-47201 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.