CVE-2021-47056

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
29/02/2024
Last modified:
09/01/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init<br /> <br /> ADF_STATUS_PF_RUNNING is (only) used and checked by adf_vf2pf_shutdown()<br /> before calling adf_iov_putmsg()-&gt;mutex_lock(vf2pf_lock), however the<br /> vf2pf_lock is initialized in adf_dev_init(), which can fail and when it<br /> fail, the vf2pf_lock is either not initialized or destroyed, a subsequent<br /> use of vf2pf_lock will cause issue.<br /> To fix this issue, only set this flag if adf_dev_init() returns 0.<br /> <br /> [ 7.178404] BUG: KASAN: user-memory-access in __mutex_lock.isra.0+0x1ac/0x7c0<br /> [ 7.180345] Call Trace:<br /> [ 7.182576] mutex_lock+0xc9/0xd0<br /> [ 7.183257] adf_iov_putmsg+0x118/0x1a0 [intel_qat]<br /> [ 7.183541] adf_vf2pf_shutdown+0x4d/0x7b [intel_qat]<br /> [ 7.183834] adf_dev_shutdown+0x172/0x2b0 [intel_qat]<br /> [ 7.184127] adf_probe+0x5e9/0x600 [qat_dh895xccvf]

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.7 (including) 4.9.269 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.10 (including) 4.14.233 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.15 (including) 4.19.191 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.20 (including) 5.4.119 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.37 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.11.21 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.12 (including) 5.12.4 (excluding)