CVE-2021-47056

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47056
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init ADF_STATUS_PF_RUNNING is (only) used and checked by adf_vf2pf_shutdown() before calling adf_iov_putmsg()->mutex_lock(vf2pf_lock), however the vf2pf_lock is initialized in adf_dev_init(), which can fail and when it fail, the vf2pf_lock is either not initialized or destroyed, a subsequent use of vf2pf_lock will cause issue. To fix this issue, only set this flag if adf_dev_init() returns 0. [ 7.178404] BUG: KASAN: user-memory-access in __mutex_lock.isra.0+0x1ac/0x7c0 [ 7.180345] Call Trace: [ 7.182576] mutex_lock+0xc9/0xd0 [ 7.183257] adf_iov_putmsg+0x118/0x1a0 [intel_qat] [ 7.183541] adf_vf2pf_shutdown+0x4d/0x7b [intel_qat] [ 7.183834] adf_dev_shutdown+0x172/0x2b0 [intel_qat] [ 7.184127] adf_probe+0x5e9/0x600 [qat_dh895xccvf]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/05ec8192ee4bfdf2a8894a68350dac9f1a155fa6 Patch
https://git.kernel.org/stable/c/09d16cee6285d37cc76311c29add6d97a7e4acda Patch
https://git.kernel.org/stable/c/1ea500ce6f7c9106e4a561d28e69215f3d451818 Patch
https://git.kernel.org/stable/c/1f50392650ae794a1aea41c213c6a3e1c824413c Patch
https://git.kernel.org/stable/c/20fd40fc6f2c2b41dc6f637f88d494b14e9c21f1 Patch
https://git.kernel.org/stable/c/446045cf682af12d9294765f6c46084b374b5654 Patch
https://git.kernel.org/stable/c/8609f5cfdc872fc3a462efa6a3eca5cb1e2f6446 Patch
https://git.kernel.org/stable/c/f4c4e07140687f42bfa40e091bb4a55d7960ce4d Patch
https://git.kernel.org/stable/c/05ec8192ee4bfdf2a8894a68350dac9f1a155fa6 Patch
https://git.kernel.org/stable/c/09d16cee6285d37cc76311c29add6d97a7e4acda Patch
https://git.kernel.org/stable/c/1ea500ce6f7c9106e4a561d28e69215f3d451818 Patch
https://git.kernel.org/stable/c/1f50392650ae794a1aea41c213c6a3e1c824413c Patch
https://git.kernel.org/stable/c/20fd40fc6f2c2b41dc6f637f88d494b14e9c21f1 Patch
https://git.kernel.org/stable/c/446045cf682af12d9294765f6c46084b374b5654 Patch
https://git.kernel.org/stable/c/8609f5cfdc872fc3a462efa6a3eca5cb1e2f6446 Patch
https://git.kernel.org/stable/c/f4c4e07140687f42bfa40e091bb4a55d7960ce4d Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

09 Jan 2025, 19:45

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-908
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/05ec8192ee4bfdf2a8894a68350dac9f1a155fa6 - () https://git.kernel.org/stable/c/05ec8192ee4bfdf2a8894a68350dac9f1a155fa6 - Patch
References () https://git.kernel.org/stable/c/09d16cee6285d37cc76311c29add6d97a7e4acda - () https://git.kernel.org/stable/c/09d16cee6285d37cc76311c29add6d97a7e4acda - Patch
References () https://git.kernel.org/stable/c/1ea500ce6f7c9106e4a561d28e69215f3d451818 - () https://git.kernel.org/stable/c/1ea500ce6f7c9106e4a561d28e69215f3d451818 - Patch
References () https://git.kernel.org/stable/c/1f50392650ae794a1aea41c213c6a3e1c824413c - () https://git.kernel.org/stable/c/1f50392650ae794a1aea41c213c6a3e1c824413c - Patch
References () https://git.kernel.org/stable/c/20fd40fc6f2c2b41dc6f637f88d494b14e9c21f1 - () https://git.kernel.org/stable/c/20fd40fc6f2c2b41dc6f637f88d494b14e9c21f1 - Patch
References () https://git.kernel.org/stable/c/446045cf682af12d9294765f6c46084b374b5654 - () https://git.kernel.org/stable/c/446045cf682af12d9294765f6c46084b374b5654 - Patch
References () https://git.kernel.org/stable/c/8609f5cfdc872fc3a462efa6a3eca5cb1e2f6446 - () https://git.kernel.org/stable/c/8609f5cfdc872fc3a462efa6a3eca5cb1e2f6446 - Patch
References () https://git.kernel.org/stable/c/f4c4e07140687f42bfa40e091bb4a55d7960ce4d - () https://git.kernel.org/stable/c/f4c4e07140687f42bfa40e091bb4a55d7960ce4d - Patch

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/05ec8192ee4bfdf2a8894a68350dac9f1a155fa6 - () https://git.kernel.org/stable/c/05ec8192ee4bfdf2a8894a68350dac9f1a155fa6 -
References () https://git.kernel.org/stable/c/09d16cee6285d37cc76311c29add6d97a7e4acda - () https://git.kernel.org/stable/c/09d16cee6285d37cc76311c29add6d97a7e4acda -
References () https://git.kernel.org/stable/c/1ea500ce6f7c9106e4a561d28e69215f3d451818 - () https://git.kernel.org/stable/c/1ea500ce6f7c9106e4a561d28e69215f3d451818 -
References () https://git.kernel.org/stable/c/1f50392650ae794a1aea41c213c6a3e1c824413c - () https://git.kernel.org/stable/c/1f50392650ae794a1aea41c213c6a3e1c824413c -
References () https://git.kernel.org/stable/c/20fd40fc6f2c2b41dc6f637f88d494b14e9c21f1 - () https://git.kernel.org/stable/c/20fd40fc6f2c2b41dc6f637f88d494b14e9c21f1 -
References () https://git.kernel.org/stable/c/446045cf682af12d9294765f6c46084b374b5654 - () https://git.kernel.org/stable/c/446045cf682af12d9294765f6c46084b374b5654 -
References () https://git.kernel.org/stable/c/8609f5cfdc872fc3a462efa6a3eca5cb1e2f6446 - () https://git.kernel.org/stable/c/8609f5cfdc872fc3a462efa6a3eca5cb1e2f6446 -
References () https://git.kernel.org/stable/c/f4c4e07140687f42bfa40e091bb4a55d7960ce4d - () https://git.kernel.org/stable/c/f4c4e07140687f42bfa40e091bb4a55d7960ce4d -

01 Mar 2024, 14:04

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: crypto: qat - ADF_STATUS_PF_RUNNING debe configurarse después de adf_dev_init ADF_STATUS_PF_RUNNING es (solo) usado y verificado por adf_vf2pf_shutdown() antes de llamar a adf_iov_putmsg()->mutex_lock(vf2pf_lock), sin embargo, vf2pf_lock es inicializado en adf_dev_init(), que puede fallar y cuando falla, vf2pf_lock no se inicializa o se destruye, un uso posterior de vf2pf_lock causará problemas. Para solucionar este problema, establezca este indicador solo si adf_dev_init() devuelve 0. [7.178404] ERROR: KASAN: acceso a memoria de usuario en __mutex_lock.isra.0+0x1ac/0x7c0 [7.180345] Seguimiento de llamadas: [7.182576] mutex_lock+0xc9 /0xd0 [ 7.183257] adf_iov_putmsg+0x118/0x1a0 [intel_qat] [ 7.183541] adf_vf2pf_shutdown+0x4d/0x7b [intel_qat] [ 7.183834] adf_dev_shutdown+0x172/0x2b0 [intel_qat] [7.184127] adf_probe+0x5e9/0x600 [qat_dh895xccvf]

29 Feb 2024, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-29 23:15

Updated : 2025-01-09 19:45

NVD link : CVE-2021-47056

Mitre link : CVE-2021-47056

CVE.ORG link : CVE-2021-47056

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-908

Use of Uninitialized Resource