What’s Vulnerable › Vulnerabilities

CVE-2021-47201: iavf: free q_vectors before queues in iavf_disable_vf

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-10 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: iavf: free q_vectors before queues in iavf_disable_vf iavf_free_queues() clears adapter->num_active_queues, which iavf_free_q_vectors() relies on, so swap the order of these two function calls in iavf_disable_vf(). This resolves a panic encountered when the interface is disabled and then later brought up again after PF communication is restored.

Affected products

• Linux kernel: from 4.13 before 5.4.162; from 5.5 before 5.10.82; from 5.11 before 5.15.5; 5.16-rc1 — fixed in 5.10.82, 5.15.5, 5.4.162

How to fix

Upgrade to a fixed version: Linux kernel 5.10.82, 5.15.5, 5.4.162. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/78638b47132244e3934dc5dc79f6372d5ce8e98c
• https://git.kernel.org/stable/c/89f22f129696ab53cfbc608e0a2184d0fea46ac1
• https://git.kernel.org/stable/c/926e8c83d4c1c2dac0026637eb0d492df876489e
• https://git.kernel.org/stable/c/9ef6589cac9a8c47f5544ccdf4c498093733bb3f
• https://git.kernel.org/stable/c/78638b47132244e3934dc5dc79f6372d5ce8e98c
• https://git.kernel.org/stable/c/89f22f129696ab53cfbc608e0a2184d0fea46ac1
• https://git.kernel.org/stable/c/926e8c83d4c1c2dac0026637eb0d492df876489e
• https://git.kernel.org/stable/c/9ef6589cac9a8c47f5544ccdf4c498093733bb3f

Get alerted when CVE-2021-47201 or the next vulnerability affects your stack