CVE-2021-47056

crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init

State: Published
Severity: Not scored
Published: Feb 29, 2024
Updated: May 11, 2026
Reserved: Feb 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init

ADF_STATUS_PF_RUNNING is (only) used and checked by adf_vf2pf_shutdown() before calling adf_iov_putmsg()->mutex_lock(vf2pf_lock), however the vf2pf_lock is initialized in adf_dev_init(), which can fail and when it fail, the vf2pf_lock is either not initialized or destroyed, a subsequent use of vf2pf_lock will cause issue. To fix this issue, only set this flag if adf_dev_init() returns 0.

[ 7.178404] BUG: KASAN: user-memory-access in __mutex_lock.isra.0+0x1ac/0x7c0 [ 7.180345] Call Trace: [ 7.182576] mutex_lock+0xc9/0xd0 [ 7.183257] adf_iov_putmsg+0x118/0x1a0 [intel_qat] [ 7.183541] adf_vf2pf_shutdown+0x4d/0x7b [intel_qat] [ 7.183834] adf_dev_shutdown+0x172/0x2b0 [intel_qat] [ 7.184127] adf_probe+0x5e9/0x600 [qat_dh895xccvf]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	25c6ffb249f612c56a48ce48a3887adf57b8f4bd to before f4c4e07140687f42bfa40e091bb4a55d7960ce4dAffected 25c6ffb249f612c56a48ce48a3887adf57b8f4bd to before 446045cf682af12d9294765f6c46084b374b5654Affected 25c6ffb249f612c56a48ce48a3887adf57b8f4bd to before 09d16cee6285d37cc76311c29add6d97a7e4acdaAffected 25c6ffb249f612c56a48ce48a3887adf57b8f4bd to before 05ec8192ee4bfdf2a8894a68350dac9f1a155fa6Affected 25c6ffb249f612c56a48ce48a3887adf57b8f4bd to before 1f50392650ae794a1aea41c213c6a3e1c824413cAffected 25c6ffb249f612c56a48ce48a3887adf57b8f4bd to before 20fd40fc6f2c2b41dc6f637f88d494b14e9c21f1Affected 25c6ffb249f612c56a48ce48a3887adf57b8f4bd to before 1ea500ce6f7c9106e4a561d28e69215f3d451818Affected 25c6ffb249f612c56a48ce48a3887adf57b8f4bd to before 8609f5cfdc872fc3a462efa6a3eca5cb1e2f6446Affected
LinuxLinux	4.7Affected before 4.7Not affected 4.9.269 through 4.9.Not affected 4.14.233 through 4.14.Not affected 4.19.191 through 4.19.Not affected 5.4.119 through 5.4.Not affected 5.10.37 through 5.10.Not affected 5.11.21 through 5.11.Not affected 5.12.4 through 5.12.*Not affected 5.13 and laterNot affected

Product

Versions

LinuxLinux

25c6ffb249f612c56a48ce48a3887adf57b8f4bd to before f4c4e07140687f42bfa40e091bb4a55d7960ce4dAffected
25c6ffb249f612c56a48ce48a3887adf57b8f4bd to before 446045cf682af12d9294765f6c46084b374b5654Affected
25c6ffb249f612c56a48ce48a3887adf57b8f4bd to before 09d16cee6285d37cc76311c29add6d97a7e4acdaAffected
25c6ffb249f612c56a48ce48a3887adf57b8f4bd to before 05ec8192ee4bfdf2a8894a68350dac9f1a155fa6Affected
25c6ffb249f612c56a48ce48a3887adf57b8f4bd to before 1f50392650ae794a1aea41c213c6a3e1c824413cAffected
25c6ffb249f612c56a48ce48a3887adf57b8f4bd to before 20fd40fc6f2c2b41dc6f637f88d494b14e9c21f1Affected
25c6ffb249f612c56a48ce48a3887adf57b8f4bd to before 1ea500ce6f7c9106e4a561d28e69215f3d451818Affected
25c6ffb249f612c56a48ce48a3887adf57b8f4bd to before 8609f5cfdc872fc3a462efa6a3eca5cb1e2f6446Affected

LinuxLinux

4.7Affected
before 4.7Not affected
4.9.269 through 4.9.*Not affected
4.14.233 through 4.14.*Not affected
4.19.191 through 4.19.*Not affected
5.4.119 through 5.4.*Not affected
5.10.37 through 5.10.*Not affected
5.11.21 through 5.11.*Not affected
5.12.4 through 5.12.*Not affected
5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.