CVE-2021-47215

A flaw was found in the Linux kernel's Mellanox network driver (mlx5e). During kernel Transport Layer Security (kTLS) receive resynchronization operations, list entries are not properly protected against concurrent modifications before processing is finished. A local privileged user could trigger this flaw to cause internal list corruption, resulting in a kernel crash and a Denial of Service (DoS).

This vulnerability is rated with a Low severity impact because exploiting it requires specialized Mellanox network adapters and an active hardware-accelerated kernel TLS (kTLS) configuration. By default, Red Hat Enterprise Linux does not enable hardware kTLS offload, limiting the flaw's exposure on standard installations. Furthermore, triggering the condition requires administrative privileges or specific network traffic interacting with the receive resynchronization mechanism, with the potential impact confined to a local denial of service via a system crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.