CVE-2021-47517

A flaw was found in the Linux kernel's ethtool interface. A timing window exists during the removal of a network device where configuration requests can still be processed on a device that is actively being unregistered. A local user with administrative privileges could exploit this flaw to trigger memory corruption or a null pointer dereference, resulting in a system crash and a Denial of Service (DoS).

Red Hat evaluates this vulnerability as having a Low impact because exploitation demands local administrative capabilities—specifically CAP_NET_ADMIN—and precise timing during interface teardown. Because privileged access is already necessary to initiate network device operations and trigger ethtool netlink requests, the flaw does not offer unauthorized privilege elevation, restricting the consequence to a system denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.