CVE-2021-47283
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
21/05/2024
Last modified:
26/12/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net:sfc: fix non-freed irq in legacy irq mode<br />
<br />
SFC driver can be configured via modparam to work using MSI-X, MSI or<br />
legacy IRQ interrupts. In the last one, the interrupt was not properly<br />
released on module remove.<br />
<br />
It was not freed because the flag irqs_hooked was not set during<br />
initialization in the case of using legacy IRQ.<br />
<br />
Example of (trimmed) trace during module remove without this fix:<br />
<br />
remove_proc_entry: removing non-empty directory &#39;irq/125&#39;, leaking at least &#39;0000:3b:00.1&#39;<br />
WARNING: CPU: 39 PID: 3658 at fs/proc/generic.c:715 remove_proc_entry+0x15c/0x170<br />
...trimmed...<br />
Call Trace:<br />
unregister_irq_proc+0xe3/0x100<br />
free_desc+0x29/0x70<br />
irq_free_descs+0x47/0x70<br />
mp_unmap_irq+0x58/0x60<br />
acpi_unregister_gsi_ioapic+0x2a/0x40<br />
acpi_pci_irq_disable+0x78/0xb0<br />
pci_disable_device+0xd1/0x100<br />
efx_pci_remove+0xa1/0x1e0 [sfc]<br />
pci_device_remove+0x38/0xa0<br />
__device_release_driver+0x177/0x230<br />
driver_detach+0xcb/0x110<br />
bus_remove_driver+0x58/0xd0<br />
pci_unregister_driver+0x2a/0xb0<br />
efx_exit_module+0x24/0xf40 [sfc]<br />
__do_sys_delete_module.constprop.0+0x171/0x280<br />
? exit_to_user_mode_prepare+0x83/0x1d0<br />
do_syscall_64+0x3d/0x80<br />
entry_SYSCALL_64_after_hwframe+0x44/0xae<br />
RIP: 0033:0x7f9f9385800b<br />
...trimmed...
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.10.44 (excluding) | |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11 (including) | 5.12.11 (excluding) |
| cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/81c4d1d83f88e15b26f4522a35cba6ffd8c5dfdd
- https://git.kernel.org/stable/c/8d717c9135a3340ae62d1699484850bfb4112b0c
- https://git.kernel.org/stable/c/8f03eeb6e0a0a0b8d617ee0a4bce729e47130036
- https://git.kernel.org/stable/c/81c4d1d83f88e15b26f4522a35cba6ffd8c5dfdd
- https://git.kernel.org/stable/c/8d717c9135a3340ae62d1699484850bfb4112b0c
- https://git.kernel.org/stable/c/8f03eeb6e0a0a0b8d617ee0a4bce729e47130036



