CVE-2021-47015
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2021-47015 is a vulnerability affecting the Linux kernel's bnxt_en driver. In the function bnxt_rx_ pkt(), an error in handling RX buffer completions can lead to an incorrect RX consumer index being passed to bnxt_discard_rx(). As a result, the driver may abort all remaining RX packets and reset the RX ring, causing a panic and potential system crash. The issue arises because the driver passes the old index instead of the current one when trying to discard the next RX packet. This defect can result in being at the wrong index during the abort process, leading to the observed crash.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX