CVE-2021-46916

A NULL pointer dereference flaw was found in ethtool loopback test in the Linux Kernel. This issue occurs due to a missing q_vector associated with the test ring when it is setup, as interrupts are not normally added to the test rings. Exploiting the vulnerability can result in system crash and denial of service attacks.

Red Hat does not ship the vulnerable version of the kernel in any of its products.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

The vulnerable code is present in ixgbe driver supporting 82598 and 82599 based PCI express 10G network connections. The vulnerability can be mitigated by either not using these chipsets or upgrading to the latest software.