| The CVE-2021-47283 vulnerability affects the SFC (Solarflare Communications) driver in the Linux kernel, specifically when it is configured to use legacy IRQ interrupts. In this mode, the interrupt was not properly released when the module was removed, causing a resource leak. |
| |
| The issue arises because the `irqs_hooked` flag is not set during initialization when using legacy IRQ. As a result, the interrupt remains allocated even after the module is removed, leading to a warning message and a kernel crash. |
| |
| The vulnerability has been fixed in Linux kernel versions 5.10.44, 5.12.11, and 5.13 with commits 8d717c9135a3, 81c4d1d83f88, and 8f03eeb6e0a0, respectively. The affected file is `drivers/net/ethernet/sfc/nic.c`. To mitigate this issue, the Linux kernel CVE team recommends updating to the latest stable kernel version. If that is not possible, individual changes can be cherry-picked from the specified commits. |
| |
