NetSight
high7.8

CVE-2021-47201

In the Linux kernel, the following vulnerability has been resolved: iavf: free q_vectors before queues in iavf_disable_vf iavf_free_queues() clears adapter->nu…

Impact

In the Linux kernel, the following vulnerability has been resolved: iavf: free q_vectors before queues in iavf_disable_vf iavf_free_queues() clears adapter->num_active_queues, which iavf_free_q_vectors() relies on, so swap the order of these two function calls in iavf_disable_vf(). This resolves a panic encountered when the interface is disabled and then later brought up again after PF communication is restored.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.13 before 5.4.162
from 5.5 before 5.10.82
from 5.11 before 5.15.5
Version 5.16

References