Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2021-47184: Linux kernel i40e driver can crash when interface removed
CVE-2021-47184 · published 2 years ago
Summary
The i40e network driver in several Canonical Linux distributions (including Azure, AWS, and LTS Xenial versions) could try to update a network filter after the virtual interface has been removed, causing the operating system to freeze or restart unexpectedly. This happens because the code attempts to use a missing pointer, leading to a kernel crash. Update the Linux kernel packages to the latest version that includes the fix, or apply the provided patch if you manage custom kernels.
What to do
- Update canonical linux-azure to version 4.15.0-1130.143~14.04.1.
- Update canonical linux-aws-hwe to version 4.15.0-1119.126~16.04.2.
- Update canonical linux-azure to version 4.15.0-1130.143~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1115.129~16.04.1.
- Update canonical linux-hwe to version 4.15.0-167.175~16.04.1.
- Update canonical linux-oracle to version 4.15.0-1086.94~16.04.1.
- Update canonical linux to version 4.15.0-167.175.
- Update canonical linux-aws to version 4.15.0-1119.127.
- Update canonical linux-aws-5.4 to version 5.4.0-1064.67~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1131.144.
- Update canonical linux-azure-5.4 to version 5.4.0-1068.71~18.04.1.
- Update canonical linux-gcp-4.15 to version 4.15.0-1115.129.
- Update canonical linux-gcp-5.4 to version 5.4.0-1063.67~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-97.110~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1014.15~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1106.108.
- Update canonical linux-oracle to version 4.15.0-1086.94.
- Update canonical linux-oracle-5.4 to version 5.4.0-1062.66~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1052.58~18.04.1.
- Update canonical linux-aws-fips to version 4.15.0-2060.62.
- Update canonical linux-azure-fips to version 4.15.0-2042.46.
- Update canonical linux-fips to version 4.15.0-1076.85.
- Update canonical linux-gcp-fips to version 4.15.0-2025.27.
- Update canonical linux to version 5.4.0-97.110.
- Update canonical linux-aws to version 5.4.0-1064.67.
- Update canonical linux-azure to version 5.4.0-1068.71.
- Update canonical linux-bluefield to version 5.4.0-1026.29.
- Update canonical linux-gcp to version 5.4.0-1063.67.
- Update canonical linux-gkeop to version 5.4.0-1032.33.
- Update canonical linux-ibm to version 5.4.0-1013.14.
- Update canonical linux-kvm to version 5.4.0-1054.56.
- Update canonical linux-oracle to version 5.4.0-1062.66.
- Update canonical linux-raspi to version 5.4.0-1052.58.
- Update canonical linux-aws-fips to version 5.4.0-1069.73+fips2.
- Update canonical linux-azure-fips to version 5.4.0-1073.76+fips1.
- Update canonical linux-fips to version 5.4.0-1041.47.
- Update canonical linux-gcp-fips to version 5.4.0-1067.71~20.04.1.
- Update debian linux to version 5.15.5-1.
- Update linux linux to version 78f2a9e831f9610e3655a0be5e675e1aa2472089 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1130.143~14.04.1 Fix: upgrade to 4.15.0-1130.143~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1119.126~16.04.2 Fix: upgrade to 4.15.0-1119.126~16.04.2
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1130.143~16.04.1 Fix: upgrade to 4.15.0-1130.143~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1115.129~16.04.1 Fix: upgrade to 4.15.0-1115.129~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-167.175~16.04.1 Fix: upgrade to 4.15.0-167.175~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1086.94~16.04.1 Fix: upgrade to 4.15.0-1086.94~16.04.1
|
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-167.175 Fix: upgrade to 4.15.0-167.175
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1119.127 Fix: upgrade to 4.15.0-1119.127
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1064.67~18.04.1 Fix: upgrade to 5.4.0-1064.67~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1131.144 Fix: upgrade to 4.15.0-1131.144
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1068.71~18.04.1 Fix: upgrade to 5.4.0-1068.71~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1115.129 Fix: upgrade to 4.15.0-1115.129
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1063.67~18.04.1 Fix: upgrade to 5.4.0-1063.67~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-97.110~18.04.1 Fix: upgrade to 5.4.0-97.110~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1014.15~18.04.1 Fix: upgrade to 5.4.0-1014.15~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1106.108 Fix: upgrade to 4.15.0-1106.108
|
| Ubuntu:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1086.94 Fix: upgrade to 4.15.0-1086.94
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1062.66~18.04.1 Fix: upgrade to 5.4.0-1062.66~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1052.58~18.04.1 Fix: upgrade to 5.4.0-1052.58~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2060.62 Fix: upgrade to 4.15.0-2060.62
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2042.46 Fix: upgrade to 4.15.0-2042.46
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1076.85 Fix: upgrade to 4.15.0-1076.85
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2025.27 Fix: upgrade to 4.15.0-2025.27
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
Showing 50 of 122. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-97.110 Fix: upgrade to 5.4.0-97.110
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1064.67 Fix: upgrade to 5.4.0-1064.67
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1068.71 Fix: upgrade to 5.4.0-1068.71
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1026.29 Fix: upgrade to 5.4.0-1026.29
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1063.67 Fix: upgrade to 5.4.0-1063.67
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1032.33 Fix: upgrade to 5.4.0-1032.33
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1013.14 Fix: upgrade to 5.4.0-1013.14
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1054.56 Fix: upgrade to 5.4.0-1054.56
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1062.66 Fix: upgrade to 5.4.0-1062.66
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1052.58 Fix: upgrade to 5.4.0-1052.58
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1069.73+fips2 Fix: upgrade to 5.4.0-1069.73+fips2
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1073.76+fips1 Fix: upgrade to 5.4.0-1073.76+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1041.47 Fix: upgrade to 5.4.0-1041.47
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1067.71~20.04.1 Fix: upgrade to 5.4.0-1067.71~20.04.1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| – | linux | linux |
< 78f2a9e831f9610e3655a0be5e675e1aa2472089 3.12 |
| – | linux | linux_kernel |
>= 3.12, < 4.14.256 >= 4.15, < 4.19.218 >= 4.20, < 5.4.162 >= 5.5, < 5.10.82 >= 5.11, < 5.15.5 5.16 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Debian:12 | debian | linux |
< 5.15.5-1 Fix: upgrade to 5.15.5-1
|
Original advisory text
In the Linux kernel, the following vulnerability has been resolved: i40e: Fix NULL ptr dereference on VSI filter sync Remove the reason of null pointer dereference in sync VSI filters. Added new I4...
In the Linux kernel, the following vulnerability has been resolved: i40e: Fix NULL ptr dereference on VSI filter sync Remove the reason of null pointer dereference in sync VSI filters. Added new I40E_VSI_RELEASING flag to signalize deleting and releasing of VSI resources to sync this thread with sync filters subtask. Without this patch it is possible to start update the VSI filter list after VSI is removed, that's causing a kernel oops.
References
- https://ubuntu.com/security/CVE-2021-47184 Third Party Advisory
- https://git.kernel.org/linus/37d9e304acd903a445df8208b8a13d707902dea6 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2021-47184 Third Party Advisory
- https://git.kernel.org/stable/c/78f2a9e831f9610e3655a0be5e675e1aa2472089 Third Party Advisory
- https://git.kernel.org/stable/c/87c421ab4a43433cb009fea44bbbc77f46913e1d Third Party Advisory
- https://git.kernel.org/stable/c/c30162da91327e4cdf7cd03079f096bb3654738c Third Party Advisory
- https://git.kernel.org/stable/c/f866513ead4370402428ef724b03c3312295c178 Third Party Advisory
- https://git.kernel.org/stable/c/e91e8427a1e1633a0261e3bb0201c836ac5b3890 Third Party Advisory
- https://git.kernel.org/stable/c/37d9e304acd903a445df8208b8a13d707902dea6 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2021-47184 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-476NULL Pointer Dereference
Timeline
Published10 Apr 2024
Updated4 Nov 2026
First seen2 Apr 2026
Sources
UBUNTU-CVE-2021-47184 · OSV
CVE-2021-47184 · NVD
CVE-2021-47184 · MITRE
DEBIAN-CVE-2021-47184 · OSV
Track software like this
Free during beta