CVE-2021-47201

A flaw was found in the Linux kernel's Intel Adaptive Virtual Function (iavf) driver. A local user with administrative privileges can trigger a Denial of Service (DoS) resulting from a kernel crash when disabling and subsequently restoring a virtual network interface. This issue is caused by the driver releasing queue resources in an incorrect order during interface deactivation, which leaves the driver in an inconsistent state when re-enabling the interface.

This vulnerability is rated as Low severity because triggering the issue requires local administrative privileges, specifically CAP_NET_ADMIN capabilities, and is confined to systems equipped with Intel SR-IOV virtual network hardware. An attacker with privileged access could cause a kernel panic and host denial of service during interface state changes, but this does not lead to confidentiality or integrity breaches. Because privileged users already possess significant system control, the security risk to standard Red Hat deployments remains low.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.