CVE-2021-47541

A flaw was found in the Linux kernel's Mellanox mlx4 network driver. A local privileged user could exploit this vulnerability to cause a Denial of Service (DoS) or kernel memory corruption by triggering a use-after-free condition. During network interface resource allocation, the driver fails to verify whether copying private driver data succeeded before continuing execution, leading to the dereference of already freed memory if an error occurs.

Fixed in 8.6. Actual before 8.6. Already fixed for all versions of the Red Hat Enterprise Linux 9.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.