GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2021-47424 (GCVE-0-2021-47424)

Vulnerability from cvelistv5 – Published: 2024-05-21 15:04 – Updated: 2026-05-11 13:54
VLAI
Title
i40e: Fix freeing of uninitialized misc IRQ vector
Summary
In the Linux kernel, the following vulnerability has been resolved: i40e: Fix freeing of uninitialized misc IRQ vector When VSI set up failed in i40e_probe() as part of PF switch set up driver was trying to free misc IRQ vectors in i40e_clear_interrupt_scheme and produced a kernel Oops: Trying to free already-free IRQ 266 WARNING: CPU: 0 PID: 5 at kernel/irq/manage.c:1731 __free_irq+0x9a/0x300 Workqueue: events work_for_cpu_fn RIP: 0010:__free_irq+0x9a/0x300 Call Trace: ? synchronize_irq+0x3a/0xa0 free_irq+0x2e/0x60 i40e_clear_interrupt_scheme+0x53/0x190 [i40e] i40e_probe.part.108+0x134b/0x1a40 [i40e] ? kmem_cache_alloc+0x158/0x1c0 ? acpi_ut_update_ref_count.part.1+0x8e/0x345 ? acpi_ut_update_object_reference+0x15e/0x1e2 ? strstr+0x21/0x70 ? irq_get_irq_data+0xa/0x20 ? mp_check_pin_attr+0x13/0xc0 ? irq_get_irq_data+0xa/0x20 ? mp_map_pin_to_irq+0xd3/0x2f0 ? acpi_register_gsi_ioapic+0x93/0x170 ? pci_conf1_read+0xa4/0x100 ? pci_bus_read_config_word+0x49/0x70 ? do_pci_enable_device+0xcc/0x100 local_pci_probe+0x41/0x90 work_for_cpu_fn+0x16/0x20 process_one_work+0x1a7/0x360 worker_thread+0x1cf/0x390 ? create_worker+0x1a0/0x1a0 kthread+0x112/0x130 ? kthread_flush_work_fn+0x10/0x10 ret_from_fork+0x1f/0x40 The problem is that at that point misc IRQ vectors were not allocated yet and we get a call trace that driver is trying to free already free IRQ vectors. Add a check in i40e_clear_interrupt_scheme for __I40E_MISC_IRQ_REQUESTED PF state before calling i40e_free_misc_vector. This state is set only if misc IRQ vectors were properly initialized.
Severity
No CVSS data available.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-06-11 17:26 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: c17401a1dd210a5f22ab1ec7c7366037c158a14c , < 60ad4cde0ad28921f9ea25b0201c774b95ffa4b4 (git)
Affected: c17401a1dd210a5f22ab1ec7c7366037c158a14c , < 17063cac4088b8e2fc0f633abddca5426ed58312 (git)
Affected: c17401a1dd210a5f22ab1ec7c7366037c158a14c , < 97aeed72af4f83ae51534f0a2473ff52f8d66236 (git)
Affected: c17401a1dd210a5f22ab1ec7c7366037c158a14c , < 75099439209d3cda439a1d9b00d19a50f0066fef (git)
Affected: c17401a1dd210a5f22ab1ec7c7366037c158a14c , < 2e5a20573a926302b233b0c2e1077f5debc7ab2e (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.15
Unaffected: 0 , < 4.15 (semver)
Unaffected: 4.19.211 , ≤ 4.19.* (semver)
Unaffected: 5.4.153 , ≤ 5.4.* (semver)
Unaffected: 5.10.73 , ≤ 5.10.* (semver)
Unaffected: 5.14.12 , ≤ 5.14.* (semver)
Unaffected: 5.15 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47424",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-11T17:26:01.019314Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-11T17:26:22.350Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:39:59.004Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/60ad4cde0ad28921f9ea25b0201c774b95ffa4b4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/17063cac4088b8e2fc0f633abddca5426ed58312"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/97aeed72af4f83ae51534f0a2473ff52f8d66236"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/75099439209d3cda439a1d9b00d19a50f0066fef"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/2e5a20573a926302b233b0c2e1077f5debc7ab2e"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/intel/i40e/i40e_main.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "60ad4cde0ad28921f9ea25b0201c774b95ffa4b4",
              "status": "affected",
              "version": "c17401a1dd210a5f22ab1ec7c7366037c158a14c",
              "versionType": "git"
            },
            {
              "lessThan": "17063cac4088b8e2fc0f633abddca5426ed58312",
              "status": "affected",
              "version": "c17401a1dd210a5f22ab1ec7c7366037c158a14c",
              "versionType": "git"
            },
            {
              "lessThan": "97aeed72af4f83ae51534f0a2473ff52f8d66236",
              "status": "affected",
              "version": "c17401a1dd210a5f22ab1ec7c7366037c158a14c",
              "versionType": "git"
            },
            {
              "lessThan": "75099439209d3cda439a1d9b00d19a50f0066fef",
              "status": "affected",
              "version": "c17401a1dd210a5f22ab1ec7c7366037c158a14c",
              "versionType": "git"
            },
            {
              "lessThan": "2e5a20573a926302b233b0c2e1077f5debc7ab2e",
              "status": "affected",
              "version": "c17401a1dd210a5f22ab1ec7c7366037c158a14c",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/intel/i40e/i40e_main.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.15"
            },
            {
              "lessThan": "4.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.211",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.153",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.73",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.14.*",
              "status": "unaffected",
              "version": "5.14.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.15",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.211",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.153",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.73",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.14.12",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: Fix freeing of uninitialized misc IRQ vector\n\nWhen VSI set up failed in i40e_probe() as part of PF switch set up\ndriver was trying to free misc IRQ vectors in\ni40e_clear_interrupt_scheme and produced a kernel Oops:\n\n   Trying to free already-free IRQ 266\n   WARNING: CPU: 0 PID: 5 at kernel/irq/manage.c:1731 __free_irq+0x9a/0x300\n   Workqueue: events work_for_cpu_fn\n   RIP: 0010:__free_irq+0x9a/0x300\n   Call Trace:\n   ? synchronize_irq+0x3a/0xa0\n   free_irq+0x2e/0x60\n   i40e_clear_interrupt_scheme+0x53/0x190 [i40e]\n   i40e_probe.part.108+0x134b/0x1a40 [i40e]\n   ? kmem_cache_alloc+0x158/0x1c0\n   ? acpi_ut_update_ref_count.part.1+0x8e/0x345\n   ? acpi_ut_update_object_reference+0x15e/0x1e2\n   ? strstr+0x21/0x70\n   ? irq_get_irq_data+0xa/0x20\n   ? mp_check_pin_attr+0x13/0xc0\n   ? irq_get_irq_data+0xa/0x20\n   ? mp_map_pin_to_irq+0xd3/0x2f0\n   ? acpi_register_gsi_ioapic+0x93/0x170\n   ? pci_conf1_read+0xa4/0x100\n   ? pci_bus_read_config_word+0x49/0x70\n   ? do_pci_enable_device+0xcc/0x100\n   local_pci_probe+0x41/0x90\n   work_for_cpu_fn+0x16/0x20\n   process_one_work+0x1a7/0x360\n   worker_thread+0x1cf/0x390\n   ? create_worker+0x1a0/0x1a0\n   kthread+0x112/0x130\n   ? kthread_flush_work_fn+0x10/0x10\n   ret_from_fork+0x1f/0x40\n\nThe problem is that at that point misc IRQ vectors\nwere not allocated yet and we get a call trace\nthat driver is trying to free already free IRQ vectors.\n\nAdd a check in i40e_clear_interrupt_scheme for __I40E_MISC_IRQ_REQUESTED\nPF state before calling i40e_free_misc_vector. This state is set only if\nmisc IRQ vectors were properly initialized."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:54:26.099Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/60ad4cde0ad28921f9ea25b0201c774b95ffa4b4"
        },
        {
          "url": "https://git.kernel.org/stable/c/17063cac4088b8e2fc0f633abddca5426ed58312"
        },
        {
          "url": "https://git.kernel.org/stable/c/97aeed72af4f83ae51534f0a2473ff52f8d66236"
        },
        {
          "url": "https://git.kernel.org/stable/c/75099439209d3cda439a1d9b00d19a50f0066fef"
        },
        {
          "url": "https://git.kernel.org/stable/c/2e5a20573a926302b233b0c2e1077f5debc7ab2e"
        }
      ],
      "title": "i40e: Fix freeing of uninitialized misc IRQ vector",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47424",
    "datePublished": "2024-05-21T15:04:11.271Z",
    "dateReserved": "2024-05-21T14:58:30.827Z",
    "dateUpdated": "2026-05-11T13:54:26.099Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2021-47424",
      "date": "2026-09-16",
      "epss": "0.00222",
      "percentile": "0.12968"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ni40e: Fix freeing of uninitialized misc IRQ vector\\n\\nWhen VSI set up failed in i40e_probe() as part of PF switch set up\\ndriver was trying to free misc IRQ vectors in\\ni40e_clear_interrupt_scheme and produced a kernel Oops:\\n\\n   Trying to free already-free IRQ 266\\n   WARNING: CPU: 0 PID: 5 at kernel/irq/manage.c:1731 __free_irq+0x9a/0x300\\n   Workqueue: events work_for_cpu_fn\\n   RIP: 0010:__free_irq+0x9a/0x300\\n   Call Trace:\\n   ? synchronize_irq+0x3a/0xa0\\n   free_irq+0x2e/0x60\\n   i40e_clear_interrupt_scheme+0x53/0x190 [i40e]\\n   i40e_probe.part.108+0x134b/0x1a40 [i40e]\\n   ? kmem_cache_alloc+0x158/0x1c0\\n   ? acpi_ut_update_ref_count.part.1+0x8e/0x345\\n   ? acpi_ut_update_object_reference+0x15e/0x1e2\\n   ? strstr+0x21/0x70\\n   ? irq_get_irq_data+0xa/0x20\\n   ? mp_check_pin_attr+0x13/0xc0\\n   ? irq_get_irq_data+0xa/0x20\\n   ? mp_map_pin_to_irq+0xd3/0x2f0\\n   ? acpi_register_gsi_ioapic+0x93/0x170\\n   ? pci_conf1_read+0xa4/0x100\\n   ? pci_bus_read_config_word+0x49/0x70\\n   ? do_pci_enable_device+0xcc/0x100\\n   local_pci_probe+0x41/0x90\\n   work_for_cpu_fn+0x16/0x20\\n   process_one_work+0x1a7/0x360\\n   worker_thread+0x1cf/0x390\\n   ? create_worker+0x1a0/0x1a0\\n   kthread+0x112/0x130\\n   ? kthread_flush_work_fn+0x10/0x10\\n   ret_from_fork+0x1f/0x40\\n\\nThe problem is that at that point misc IRQ vectors\\nwere not allocated yet and we get a call trace\\nthat driver is trying to free already free IRQ vectors.\\n\\nAdd a check in i40e_clear_interrupt_scheme for __I40E_MISC_IRQ_REQUESTED\\nPF state before calling i40e_free_misc_vector. This state is set only if\\nmisc IRQ vectors were properly initialized.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se resolvi\\u00f3 la siguiente vulnerabilidad: i40e: Se corrigi\\u00f3 la liberaci\\u00f3n de un vector IRQ miscel\\u00e1neo no inicializado. Cuando la configuraci\\u00f3n de VSI fall\\u00f3 en i40e_probe() como parte de la configuraci\\u00f3n del conmutador PF, el controlador intentaba liberar vectores IRQ miscel\\u00e1neos en i40e_clear_interrupt_scheme y produjo un kernel Oops: Intentando liberar IRQ 266 que ya est\\u00e1 libre ADVERTENCIA: CPU: 0 PID: 5 en kernel/irq/manage.c:1731 __free_irq+0x9a/0x300 Cola de trabajo: eventos work_for_cpu_fn RIP: 0010:__free_irq+0x9a/0x300 Seguimiento de llamadas: ? synchronize_irq+0x3a/0xa0 free_irq+0x2e/0x60 i40e_clear_interrupt_scheme+0x53/0x190 [i40e] i40e_probe.part.108+0x134b/0x1a40 [i40e] ? kmem_cache_alloc+0x158/0x1c0? acpi_ut_update_ref_count.part.1+0x8e/0x345? acpi_ut_update_object_reference+0x15e/0x1e2? chain+0x21/0x70 ? irq_get_irq_data+0xa/0x20 ? mp_check_pin_attr+0x13/0xc0? irq_get_irq_data+0xa/0x20 ? mp_map_pin_to_irq+0xd3/0x2f0? acpi_register_gsi_ioapic+0x93/0x170? pci_conf1_read+0xa4/0x100? pci_bus_read_config_word+0x49/0x70? do_pci_enable_device+0xcc/0x100 local_pci_probe+0x41/0x90 work_for_cpu_fn+0x16/0x20 Process_one_work+0x1a7/0x360 worker_thread+0x1cf/0x390 ? create_worker+0x1a0/0x1a0 kthread+0x112/0x130? kthread_flush_work_fn+0x10/0x10 ret_from_fork+0x1f/0x40 El problema es que en ese momento a\\u00fan no se hab\\u00edan asignado varios vectores IRQ y obtenemos un seguimiento de llamada de que el controlador est\\u00e1 intentando liberar vectores IRQ que ya est\\u00e1n libres. Agregue una verificaci\\u00f3n en i40e_clear_interrupt_scheme para el estado __I40E_MISC_IRQ_REQUESTED PF antes de llamar a i40e_free_misc_vector. Este estado se establece solo si se inicializaron correctamente varios vectores IRQ.\"}]",
      "id": "CVE-2021-47424",
      "lastModified": "2024-11-21T06:36:06.987",
      "published": "2024-05-21T15:15:27.830",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/17063cac4088b8e2fc0f633abddca5426ed58312\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/2e5a20573a926302b233b0c2e1077f5debc7ab2e\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/60ad4cde0ad28921f9ea25b0201c774b95ffa4b4\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/75099439209d3cda439a1d9b00d19a50f0066fef\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/97aeed72af4f83ae51534f0a2473ff52f8d66236\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/17063cac4088b8e2fc0f633abddca5426ed58312\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/2e5a20573a926302b233b0c2e1077f5debc7ab2e\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/60ad4cde0ad28921f9ea25b0201c774b95ffa4b4\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/75099439209d3cda439a1d9b00d19a50f0066fef\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/97aeed72af4f83ae51534f0a2473ff52f8d66236\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2021-47424\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-21T15:15:27.830\",\"lastModified\":\"2026-06-17T04:17:26.420\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ni40e: Fix freeing of uninitialized misc IRQ vector\\n\\nWhen VSI set up failed in i40e_probe() as part of PF switch set up\\ndriver was trying to free misc IRQ vectors in\\ni40e_clear_interrupt_scheme and produced a kernel Oops:\\n\\n   Trying to free already-free IRQ 266\\n   WARNING: CPU: 0 PID: 5 at kernel/irq/manage.c:1731 __free_irq+0x9a/0x300\\n   Workqueue: events work_for_cpu_fn\\n   RIP: 0010:__free_irq+0x9a/0x300\\n   Call Trace:\\n   ? synchronize_irq+0x3a/0xa0\\n   free_irq+0x2e/0x60\\n   i40e_clear_interrupt_scheme+0x53/0x190 [i40e]\\n   i40e_probe.part.108+0x134b/0x1a40 [i40e]\\n   ? kmem_cache_alloc+0x158/0x1c0\\n   ? acpi_ut_update_ref_count.part.1+0x8e/0x345\\n   ? acpi_ut_update_object_reference+0x15e/0x1e2\\n   ? strstr+0x21/0x70\\n   ? irq_get_irq_data+0xa/0x20\\n   ? mp_check_pin_attr+0x13/0xc0\\n   ? irq_get_irq_data+0xa/0x20\\n   ? mp_map_pin_to_irq+0xd3/0x2f0\\n   ? acpi_register_gsi_ioapic+0x93/0x170\\n   ? pci_conf1_read+0xa4/0x100\\n   ? pci_bus_read_config_word+0x49/0x70\\n   ? do_pci_enable_device+0xcc/0x100\\n   local_pci_probe+0x41/0x90\\n   work_for_cpu_fn+0x16/0x20\\n   process_one_work+0x1a7/0x360\\n   worker_thread+0x1cf/0x390\\n   ? create_worker+0x1a0/0x1a0\\n   kthread+0x112/0x130\\n   ? kthread_flush_work_fn+0x10/0x10\\n   ret_from_fork+0x1f/0x40\\n\\nThe problem is that at that point misc IRQ vectors\\nwere not allocated yet and we get a call trace\\nthat driver is trying to free already free IRQ vectors.\\n\\nAdd a check in i40e_clear_interrupt_scheme for __I40E_MISC_IRQ_REQUESTED\\nPF state before calling i40e_free_misc_vector. This state is set only if\\nmisc IRQ vectors were properly initialized.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: i40e: Se corrigi\u00f3 la liberaci\u00f3n de un vector IRQ miscel\u00e1neo no inicializado. Cuando la configuraci\u00f3n de VSI fall\u00f3 en i40e_probe() como parte de la configuraci\u00f3n del conmutador PF, el controlador intentaba liberar vectores IRQ miscel\u00e1neos en i40e_clear_interrupt_scheme y produjo un kernel Oops: Intentando liberar IRQ 266 que ya est\u00e1 libre ADVERTENCIA: CPU: 0 PID: 5 en kernel/irq/manage.c:1731 __free_irq+0x9a/0x300 Cola de trabajo: eventos work_for_cpu_fn RIP: 0010:__free_irq+0x9a/0x300 Seguimiento de llamadas: ? synchronize_irq+0x3a/0xa0 free_irq+0x2e/0x60 i40e_clear_interrupt_scheme+0x53/0x190 [i40e] i40e_probe.part.108+0x134b/0x1a40 [i40e] ? kmem_cache_alloc+0x158/0x1c0? acpi_ut_update_ref_count.part.1+0x8e/0x345? acpi_ut_update_object_reference+0x15e/0x1e2? chain+0x21/0x70 ? irq_get_irq_data+0xa/0x20 ? mp_check_pin_attr+0x13/0xc0? irq_get_irq_data+0xa/0x20 ? mp_map_pin_to_irq+0xd3/0x2f0? acpi_register_gsi_ioapic+0x93/0x170? pci_conf1_read+0xa4/0x100? pci_bus_read_config_word+0x49/0x70? do_pci_enable_device+0xcc/0x100 local_pci_probe+0x41/0x90 work_for_cpu_fn+0x16/0x20 Process_one_work+0x1a7/0x360 worker_thread+0x1cf/0x390 ? create_worker+0x1a0/0x1a0 kthread+0x112/0x130? kthread_flush_work_fn+0x10/0x10 ret_from_fork+0x1f/0x40 El problema es que en ese momento a\u00fan no se hab\u00edan asignado varios vectores IRQ y obtenemos un seguimiento de llamada de que el controlador est\u00e1 intentando liberar vectores IRQ que ya est\u00e1n libres. Agregue una verificaci\u00f3n en i40e_clear_interrupt_scheme para el estado __I40E_MISC_IRQ_REQUESTED PF antes de llamar a i40e_free_misc_vector. Este estado se establece solo si se inicializaron correctamente varios vectores IRQ.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/net/ethernet/intel/i40e/i40e_main.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"c17401a1dd210a5f22ab1ec7c7366037c158a14c\",\"lessThan\":\"60ad4cde0ad28921f9ea25b0201c774b95ffa4b4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c17401a1dd210a5f22ab1ec7c7366037c158a14c\",\"lessThan\":\"17063cac4088b8e2fc0f633abddca5426ed58312\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c17401a1dd210a5f22ab1ec7c7366037c158a14c\",\"lessThan\":\"97aeed72af4f83ae51534f0a2473ff52f8d66236\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c17401a1dd210a5f22ab1ec7c7366037c158a14c\",\"lessThan\":\"75099439209d3cda439a1d9b00d19a50f0066fef\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c17401a1dd210a5f22ab1ec7c7366037c158a14c\",\"lessThan\":\"2e5a20573a926302b233b0c2e1077f5debc7ab2e\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/net/ethernet/intel/i40e/i40e_main.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.15\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.15\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.211\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.153\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.73\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.14.12\",\"lessThanOrEqual\":\"5.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-06-11T17:26:01.019314Z\",\"id\":\"CVE-2021-47424\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-908\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.211\",\"matchCriteriaId\":\"19F2BDAE-0E29-4C98-A02A-4DA148685995\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.153\",\"matchCriteriaId\":\"99815E71-6131-41A5-B309-1917CBBDF09C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.73\",\"matchCriteriaId\":\"83DBC258-8513-4ECB-A55E-57E743405733\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.14.12\",\"matchCriteriaId\":\"20EB962C-32DC-448F-A900-BCF9A726F9EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E46C74C6-B76B-4C94-A6A4-FD2FFF62D644\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"60134C3A-06E4-48C1-B04F-2903732A4E56\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"0460DA88-8FE1-46A2-9DDA-1F1ABA552E71\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF55383D-4DF2-45DC-93F7-571F4F978EAB\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/17063cac4088b8e2fc0f633abddca5426ed58312\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2e5a20573a926302b233b0c2e1077f5debc7ab2e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/60ad4cde0ad28921f9ea25b0201c774b95ffa4b4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/75099439209d3cda439a1d9b00d19a50f0066fef\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/97aeed72af4f83ae51534f0a2473ff52f8d66236\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/17063cac4088b8e2fc0f633abddca5426ed58312\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2e5a20573a926302b233b0c2e1077f5debc7ab2e\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/60ad4cde0ad28921f9ea25b0201c774b95ffa4b4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/75099439209d3cda439a1d9b00d19a50f0066fef\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/97aeed72af4f83ae51534f0a2473ff52f8d66236\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T10:55:03+00:00",
      "cve": "CVE-2021-47424",
      "id": "CVE-2021-47424",
      "initial_release_date": "2021-01-01T00:00:00+00:00",
      "product_status:known_affected": "76",
      "product_status:known_not_affected": "122",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: i40e: Fix freeing of uninitialized misc IRQ vector",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-47424.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T02:38:17Z",
      "cve": "CVE-2021-47424",
      "id": "CVE-2021-47424",
      "initial_release_date": "2024-05-28T03:33:54Z",
      "product_status:known_affected": "374",
      "product_status:known_not_affected": "68",
      "product_status:recommended": "657",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2021-47424",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2021-47424.json",
      "version": "59"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/60ad4cde0ad28921f9ea25b0201c774b95ffa4b4\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/17063cac4088b8e2fc0f633abddca5426ed58312\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/97aeed72af4f83ae51534f0a2473ff52f8d66236\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/75099439209d3cda439a1d9b00d19a50f0066fef\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/2e5a20573a926302b233b0c2e1077f5debc7ab2e\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-04T05:39:59.004Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2021-47424\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-06-11T17:26:01.019314Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-06-11T17:26:09.276Z\"}}], \"cna\": {\"title\": \"i40e: Fix freeing of uninitialized misc IRQ vector\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"c17401a1dd210a5f22ab1ec7c7366037c158a14c\", \"lessThan\": \"60ad4cde0ad28921f9ea25b0201c774b95ffa4b4\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"c17401a1dd210a5f22ab1ec7c7366037c158a14c\", \"lessThan\": \"17063cac4088b8e2fc0f633abddca5426ed58312\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"c17401a1dd210a5f22ab1ec7c7366037c158a14c\", \"lessThan\": \"97aeed72af4f83ae51534f0a2473ff52f8d66236\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"c17401a1dd210a5f22ab1ec7c7366037c158a14c\", \"lessThan\": \"75099439209d3cda439a1d9b00d19a50f0066fef\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"c17401a1dd210a5f22ab1ec7c7366037c158a14c\", \"lessThan\": \"2e5a20573a926302b233b0c2e1077f5debc7ab2e\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/net/ethernet/intel/i40e/i40e_main.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.15\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.15\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.211\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.153\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.73\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.14.12\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.14.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/net/ethernet/intel/i40e/i40e_main.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/60ad4cde0ad28921f9ea25b0201c774b95ffa4b4\"}, {\"url\": \"https://git.kernel.org/stable/c/17063cac4088b8e2fc0f633abddca5426ed58312\"}, {\"url\": \"https://git.kernel.org/stable/c/97aeed72af4f83ae51534f0a2473ff52f8d66236\"}, {\"url\": \"https://git.kernel.org/stable/c/75099439209d3cda439a1d9b00d19a50f0066fef\"}, {\"url\": \"https://git.kernel.org/stable/c/2e5a20573a926302b233b0c2e1077f5debc7ab2e\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ni40e: Fix freeing of uninitialized misc IRQ vector\\n\\nWhen VSI set up failed in i40e_probe() as part of PF switch set up\\ndriver was trying to free misc IRQ vectors in\\ni40e_clear_interrupt_scheme and produced a kernel Oops:\\n\\n   Trying to free already-free IRQ 266\\n   WARNING: CPU: 0 PID: 5 at kernel/irq/manage.c:1731 __free_irq+0x9a/0x300\\n   Workqueue: events work_for_cpu_fn\\n   RIP: 0010:__free_irq+0x9a/0x300\\n   Call Trace:\\n   ? synchronize_irq+0x3a/0xa0\\n   free_irq+0x2e/0x60\\n   i40e_clear_interrupt_scheme+0x53/0x190 [i40e]\\n   i40e_probe.part.108+0x134b/0x1a40 [i40e]\\n   ? kmem_cache_alloc+0x158/0x1c0\\n   ? acpi_ut_update_ref_count.part.1+0x8e/0x345\\n   ? acpi_ut_update_object_reference+0x15e/0x1e2\\n   ? strstr+0x21/0x70\\n   ? irq_get_irq_data+0xa/0x20\\n   ? mp_check_pin_attr+0x13/0xc0\\n   ? irq_get_irq_data+0xa/0x20\\n   ? mp_map_pin_to_irq+0xd3/0x2f0\\n   ? acpi_register_gsi_ioapic+0x93/0x170\\n   ? pci_conf1_read+0xa4/0x100\\n   ? pci_bus_read_config_word+0x49/0x70\\n   ? do_pci_enable_device+0xcc/0x100\\n   local_pci_probe+0x41/0x90\\n   work_for_cpu_fn+0x16/0x20\\n   process_one_work+0x1a7/0x360\\n   worker_thread+0x1cf/0x390\\n   ? create_worker+0x1a0/0x1a0\\n   kthread+0x112/0x130\\n   ? kthread_flush_work_fn+0x10/0x10\\n   ret_from_fork+0x1f/0x40\\n\\nThe problem is that at that point misc IRQ vectors\\nwere not allocated yet and we get a call trace\\nthat driver is trying to free already free IRQ vectors.\\n\\nAdd a check in i40e_clear_interrupt_scheme for __I40E_MISC_IRQ_REQUESTED\\nPF state before calling i40e_free_misc_vector. This state is set only if\\nmisc IRQ vectors were properly initialized.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.211\", \"versionStartIncluding\": \"4.15\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.153\", \"versionStartIncluding\": \"4.15\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.73\", \"versionStartIncluding\": \"4.15\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.14.12\", \"versionStartIncluding\": \"4.15\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15\", \"versionStartIncluding\": \"4.15\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-11T13:54:26.099Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2021-47424\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-11T13:54:26.099Z\", \"dateReserved\": \"2024-05-21T14:58:30.827Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-21T15:04:11.271Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.