Answer in brief
CVE-2021-47541 records a High severity (CVSS 7.8) vulnerability in net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=ec25bc04ed8e12947738468cbe2191f1529f9e39 <be12572c5ddc8ad7453bada4eec8fa46967dc757 || >=ec25bc04ed8e12947738468cbe2191f1529f9e39 <676dc7d9b15bf8733233a2db1ec3f9091ab34275 || >=ec25bc04ed8e12947738468cbe2191f1529f9e39 <e461a9816a1ac5b4aeb61621b817225b61e46a68 || >=ec25bc04ed8e12947738468cbe2191f1529f9e39 <f1d43efa59f1edd3e7eca0e94559b4c6b1cd4e2b || >=ec25bc04ed8e12947738468cbe2191f1529f9e39 <75917372eef0dbfb290ae45474314d35f97aea18 || >=ec25bc04ed8e12947738468cbe2191f1529f9e39 <addad7643142f500080417dd7272f49b7a185570 | be12572c5ddc8ad7453bada4eec8fa46967dc757, 676dc7d9b15bf8733233a2db1ec3f9091ab34275, e461a9816a1ac5b4aeb61621b817225b61e46a68, f1d43efa59f1edd3e7eca0e94559b4c6b1cd4e2b, 75917372eef0dbfb290ae45474314d35f97aea18, addad7643142f500080417dd7272f49b7a185570 |
| Linux/Linuxgeneric | 4.7 | Not reported |
Published upstream
May 24, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 4, 2026
In the Linux kernel, the following vulnerability has been resolved: net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() In mlx4_en_try_alloc_resources(), mlx4_en_copy_priv() is called and tmp->tx_cq will be freed on the error path of mlx4_en_copy_priv(). After that mlx4_en_alloc_resources() is called and there is a dereference of &tmp->tx_cq[t][i] in mlx4_en_alloc_resources(), which could lead to a use after free problem on failure of mlx4_en_copy_priv(). Fix this bug by adding a check of mlx4_en_copy_priv() This bug was found by a static analyzer. The analysis employs differential checking to identify inconsistent security operations (e.g., checks or kfrees) between two code paths and confirms that the inconsistent operations are not recovered in the current function or the callers, so they constitute bugs. Note that, as a bug found by static analysis, it can be a false positive or hard to trigger. Multiple researchers have cross-reviewed the bug. Builds with CONFIG_MLX4_EN=m show no new warnings, and our static analyzer no longer warns about this code.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2021-47541 records a High severity (CVSS 7.8) vulnerability in net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=ec25bc04ed8e12947738468cbe2191f1529f9e39 <be12572c5ddc8ad7453bada4eec8fa46967dc757 || >=ec25bc04ed8e12947738468cbe2191f1529f9e39 <676dc7d9b15bf8733233a2db1ec3f9091ab34275 || >=ec25bc04ed8e12947738468cbe2191f1529f9e39 <e461a9816a1ac5b4aeb61621b817225b61e46a68 || >=ec25bc04ed8e12947738468cbe2191f1529f9e39 <f1d43efa59f1edd3e7eca0e94559b4c6b1cd4e2b || >=ec25bc04ed8e12947738468cbe2191f1529f9e39 <75917372eef0dbfb290ae45474314d35f97aea18 || >=ec25bc04ed8e12947738468cbe2191f1529f9e39 <addad7643142f500080417dd7272f49b7a185570 | be12572c5ddc8ad7453bada4eec8fa46967dc757, 676dc7d9b15bf8733233a2db1ec3f9091ab34275, e461a9816a1ac5b4aeb61621b817225b61e46a68, f1d43efa59f1edd3e7eca0e94559b4c6b1cd4e2b, 75917372eef0dbfb290ae45474314d35f97aea18, addad7643142f500080417dd7272f49b7a185570 |
| Linux/Linuxgeneric | 4.7 | Not reported |
Published upstream
May 24, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 4, 2026
In the Linux kernel, the following vulnerability has been resolved: net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() In mlx4_en_try_alloc_resources(), mlx4_en_copy_priv() is called and tmp->tx_cq will be freed on the error path of mlx4_en_copy_priv(). After that mlx4_en_alloc_resources() is called and there is a dereference of &tmp->tx_cq[t][i] in mlx4_en_alloc_resources(), which could lead to a use after free problem on failure of mlx4_en_copy_priv(). Fix this bug by adding a check of mlx4_en_copy_priv() This bug was found by a static analyzer. The analysis employs differential checking to identify inconsistent security operations (e.g., checks or kfrees) between two code paths and confirms that the inconsistent operations are not recovered in the current function or the callers, so they constitute bugs. Note that, as a bug found by static analysis, it can be a false positive or hard to trigger. Multiple researchers have cross-reviewed the bug. Builds with CONFIG_MLX4_EN=m show no new warnings, and our static analyzer no longer warns about this code.
Quoted source text, attributed separately from HOL analysis.