CVE-2021-47138

A vulnerability was found in the Linux kernel whereby hardware registries that have the server TID base may contain invalid values when the adapter is in a bad state. Reading these invalid values can result in out-of-bounds memory access, which can cause memory corruption or crashes.

Red Hat believes this vulnerability to be of Moderate impact because the privileges required for exploitation are high. More specifically, privileged code is required to intentionally place the adapter into a bad state and then trigger the cxgb4 filter cleanup routines.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.