What’s Vulnerable › Vulnerabilities

CVE-2021-47501: i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-24 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc When trying to dump VFs VSI RX/TX descriptors using debugfs there was a crash due to NULL pointer dereference in i40e_dbg_dump_desc. Added a check to i40e_dbg_dump_desc that checks if VSI type is correct for dumping RX/TX descriptors.

Affected products

• Linux kernel: from 3.12 before 5.10.85; from 5.11 before 5.15.8; 5.16-rc1, 5.16-rc2, 5.16-rc3, 5.16-rc4 — fixed in 5.10.85, 5.15.8

How to fix

Upgrade to a fixed version: Linux kernel 5.10.85, 5.15.8. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/16431e442db248ecd8aa9457cf0a656f1885f56e
• https://git.kernel.org/stable/c/23ec111bf3549aae37140330c31a16abfc172421
• https://git.kernel.org/stable/c/e5b7fb2198abc50058f1a29c395b004f76ab1c83
• https://git.kernel.org/stable/c/16431e442db248ecd8aa9457cf0a656f1885f56e
• https://git.kernel.org/stable/c/23ec111bf3549aae37140330c31a16abfc172421
• https://git.kernel.org/stable/c/e5b7fb2198abc50058f1a29c395b004f76ab1c83

Get alerted when CVE-2021-47501 or the next vulnerability affects your stack