CVE-2021-47148

HIGH

Linux Kernel 5.12-5.12.8 - Out-of-bounds Write in otx2_set_rxfh_context

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix a buffer overflow in otx2_set_rxfh_context() This function is called from ethtool_set_rxfh() and "*rss_context" comes from the user. Add some bounds checking to prevent memory corruption.

References (2)

Core 2

Core References

Patch

https://git.kernel.org/stable/c/389146bc6d2bbb20714d06624b74856320ce40f7

Patch

https://git.kernel.org/stable/c/e5cc361e21648b75f935f9571d4003aaee480214

Scores

CVSS v3 7.8

EPSS 0.0023

EPSS Percentile 14.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-787

Status published

Products (8)

Linux/Linux < 5.12

Linux/Linux 5.12

Linux/Linux 5.12.9 - 5.12.*

Linux/Linux 5.13

Linux/Linux 81a4362016e7d8b17031fe1aa43cdb58a7f0f163 - 389146bc6d2bbb20714d06624b74856320ce40f7

Linux/Linux 81a4362016e7d8b17031fe1aa43cdb58a7f0f163 - e5cc361e21648b75f935f9571d4003aaee480214

linux/linux_kernel 5.13 rc1 (3 CPE variants)

linux/linux_kernel 5.12 - 5.12.9

Published Mar 25, 2024

Tracked Since Feb 18, 2026