CVE-2021-47485

A flaw was found in the Linux kernel's QLogic InfiniBand (IB/qib) driver. A local user can exploit this vulnerability to cause a Denial of Service (DoS) or potentially achieve privilege escalation. By supplying specially crafted buffer sizes, an attacker triggers an integer overflow during user-space packet calculations. This causes a buffer overflow in kernel memory, leading to memory corruption or a system crash.

This vulnerability is rated as Low severity because successful exploitation requires specialized QLogic InfiniBand hardware to be installed and active, limiting the attack surface on standard enterprise deployments. To trigger the flaw, an authenticated local attacker must have permissions to interact directly with the user-space InfiniBand send DMA interface. Systems lacking this physical hardware or operating without the driver loaded are not exposed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.