CVE-2021-47560
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2021
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
mlxsw: spectrum: Protect driver from buggy firmware
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum: Protect driver from buggy firmware When processing port up/down events generated by the device's firmware, the driver protects itself from events reported for non-existent local ports, but not the CPU port (local port 0), which exists, but lacks a netdev. This can result in a NULL pointer dereference when calling netif_carrier_{on,off}(). Fix this by bailing early when processing an event reported for the CPU port. Problem was only observed when running on top of a buggy emulator.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 28b1987ef5064dd5c43538ba1168ef7b801f3cad | affected | git | 90d0736876c50ecde1a3275636a06b9ddb1cace9 | Unavailable | None listed |
| 28b1987ef5064dd5c43538ba1168ef7b801f3cad | affected | git | da4d70199e5d82da664a80077508d6c18f5e76df | Unavailable | None listed |
| 28b1987ef5064dd5c43538ba1168ef7b801f3cad | affected | git | 63b08b1f6834bbb0b4f7783bf63b80c8c8e9a047 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 5.4 | Unavailable | None listed |
| 5.10.83 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.6 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 5.16 | unaffected | original_commit_for_fix | Unavailable | * | None listed |