CVE-2021-47056

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init

ADF_STATUS_PF_RUNNING is (only) used and checked by adf_vf2pf_shutdown() before calling adf_iov_putmsg()->mutex_lock(vf2pf_lock), however the vf2pf_lock is initialized in adf_dev_init(), which can fail and when it fail, the vf2pf_lock is either not initialized or destroyed, a subsequent use of vf2pf_lock will cause issue. To fix this issue, only set this flag if adf_dev_init() returns 0.

[ 7.178404] BUG: KASAN: user-memory-access in __mutex_lock.isra.0+0x1ac/0x7c0 [ 7.180345] Call Trace: [ 7.182576] mutex_lock+0xc9/0xd0 [ 7.183257] adf_iov_putmsg+0x118/0x1a0 [intel_qat] [ 7.183541] adf_vf2pf_shutdown+0x4d/0x7b [intel_qat] [ 7.183834] adf_dev_shutdown+0x172/0x2b0 [intel_qat] [ 7.184127] adf_probe+0x5e9/0x600 [qat_dh895xccvf]

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-908

Affected software

VendorProductVersions
LinuxLinux>= 25c6ffb249f612c56a48ce48a3887adf57b8f4bd, < f4c4e07140687f42bfa40e091bb4a55d7960ce4d; >= 25c6ffb249f612c56a48ce48a3887adf57b8f4bd, < 446045cf682af12d9294765f6c46084b374b5654; >= 25c6ffb249f612c56a48ce48a3887adf57b8f4bd, < 09d16cee6285d37cc76311c29add6d97a7e4acda; >= 25c6ffb249f612c56a48ce48a3887adf57b8f4bd, < 05ec8192ee4bfdf2a8894a68350dac9f1a155fa6; >= 25c6ffb249f612c56a48ce48a3887adf57b8f4bd, < 1f50392650ae794a1aea41c213c6a3e1c824413c; >= 25c6ffb249f612c56a48ce48a3887adf57b8f4bd, < 20fd40fc6f2c2b41dc6f637f88d494b14e9c21f1; >= 25c6ffb249f612c56a48ce48a3887adf57b8f4bd, < 1ea500ce6f7c9106e4a561d28e69215f3d451818; >= 25c6ffb249f612c56a48ce48a3887adf57b8f4bd, < 8609f5cfdc872fc3a462efa6a3eca5cb1e2f6446
LinuxLinux4.7

References

Timeline

Published
Feb 29, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-470575.5In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to mapCVE-2021-470587.8In the Linux kernel, the following vulnerability has been resolved: regmap: set debugfs_name to NULL after it is freed There is a upstreamCVE-2021-470595.5In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - fix result memory leak on error path This patch fixCVE-2021-470607.8In the Linux kernel, the following vulnerability has been resolved: KVM: Stop looking for coalesced MMIO zones if the bus is destroyed AboCVE-2021-470617.8In the Linux kernel, the following vulnerability has been resolved: KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCCVE-2021-470625.5In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs UCVE-2021-470637.8In the Linux kernel, the following vulnerability has been resolved: drm: bridge/panel: Cleanup connector on bridge detach If we don't callCVE-2021-470645.3In the Linux kernel, the following vulnerability has been resolved: mt76: fix potential DMA mapping leak With buf uninitialized in mt76_dmCVE-2021-470657.8In the Linux kernel, the following vulnerability has been resolved: rtw88: Fix array overrun in rtw_get_tx_power_params() Using a kernel wCVE-2021-470665.5In the Linux kernel, the following vulnerability has been resolved: async_xor: increase src_offs when dropping destination page Now we supCVE-2021-470675.5In the Linux kernel, the following vulnerability has been resolved: soc/tegra: regulators: Fix locking up when voltage-spread is out of ranCVE-2021-470687.8In the Linux kernel, the following vulnerability has been resolved: net/nfc: fix use-after-free llcp_sock_bind/connect Commits 8a4cd82d ("
CVE-2021-47056: Medium severity, CVSS 5.5 | Vulnix