CVE-2021-47056

Summary

CVE-2021-47056 is a vulnerability affecting the Linux kernel's crypto module, specifically the qat driver. The issue lies in the sequence of initializing and checking the flag ADF_STATUS_PF_RUNNING. This flag is set after adf_dev_init() in the corrected version, but in the affected codebase, it was set unconditionally. As a result, if adf_dev_init() fails, the flag may not be set, and a subsequent use of the vf2pf_lock will lead to a mutex issue, causing a kernel bug. The vulnerability was identified during a KASAN memory scan and was found in the adf_vf2pf_shutdown function.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.