CVE-2021-46964

Summary

CVE-2021-46964 vulnerability affects the Linux kernel's scsi driver, specifically the qla2xxx family. The issue arises due to a reduction in the number of MSI-X vectors allocated, which breaks the vector allocation assumptions in several functions. As a result, the driver assumes the availability of more queue pairs than actually exist, leading to a NULL pointer dereference and a kernel crash when attempting to allocate a queue pair. This vulnerability affects systems with two CPUs and could potentially lead to unbalanced QP allocation. The fix involves allocating the correct number of vectors to provide every CPU its own hardware queue while still handling reserved interrupts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.