{
  "cveId": "CVE-2021-46931",
  "url": "https://patchblox.com/security/cve/CVE-2021-46931",
  "summary": "CVE-2021-46931 is fixed in linux on 1 platform, first by DEBIAN-CVE-2021-46931, released February 27, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: Wrap the tx reporter dump callback to...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: Wrap the tx reporter dump callback to extract the sq  Function mlx5e_tx_reporter_dump_sq() casts its void * argument to struct mlx5e_txqsq *, but in TX-timeout-recovery flow the argument is actually of type struct mlx5e_tx_timeout_ctx *.   mlx5_core 0000:08:00.1 enp8s0f1: TX timeout detected  mlx5_core 0000:08:00.1 enp8s0f1: TX timeout on queue: 1, SQ: 0x11ec, CQ: 0x146d, SQ Cons: 0x0 SQ Prod: 0x1, usecs since last trans: 21565000  BUG: stack guard page was hit at 0000000093f1a2de (stack is 00000000b66ea0dc..000000004d932dae)  kernel stack overflow (page fault): 0000 [#1] SMP NOPTI  CPU: 5 PID: 95 Comm: kworker/u20:1 Tainted: G W OE 5.13.0_mlnx #1  Hardware name: QEMU Standard PC (Q35 \u002B ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014  Workqueue: mlx5e mlx5e_tx_timeout_work [mlx5_core]  RIP: 0010:mlx5e_tx_reporter_dump_sq\u002B0xd3/0x180  [mlx5_core]  Call Trace:  mlx5e_tx_reporter_dump\u002B0x43/0x1c0 [mlx5_core]  devlink_health_do_dump.part.91\u002B0x71/0xd0  devlink_health_report\u002B0x157/0x1b0  mlx5e_reporter_tx_timeout\u002B0xb9/0xf0 [mlx5_core]  ? mlx5e_tx_reporter_err_cqe_recover\u002B0x1d0/0x1d0  [mlx5_core]  ? mlx5e_health_queue_dump\u002B0xd0/0xd0 [mlx5_core]  ? update_load_avg\u002B0x19b/0x550  ? set_next_entity\u002B0x72/0x80  ? pick_next_task_fair\u002B0x227/0x340  ? finish_task_switch\u002B0xa2/0x280    mlx5e_tx_timeout_work\u002B0x83/0xb0 [mlx5_core]    process_one_work\u002B0x1de/0x3a0    worker_thread\u002B0x2d/0x3c0  ? process_one_work\u002B0x3a0/0x3a0    kthread\u002B0x115/0x130  ? kthread_park\u002B0x90/0x90    ret_from_fork\u002B0x1f/0x30  --[ end trace 51ccabea504edaff ]---  RIP: 0010:mlx5e_tx_reporter_dump_sq\u002B0xd3/0x180  PKRU: 55555554  Kernel panic - not syncing: Fatal exception  Kernel Offset: disabled  end Kernel panic - not syncing: Fatal exception  To fix this bug add a wrapper for mlx5e_tx_reporter_dump_sq() which extracts the sq from struct mlx5e_tx_timeout_ctx and set it as the TX-timeout-recovery flow dump callback.",
  "published": "2024-02-27T10:15:07Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00245,
  "epssPercentile": 0.15858,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.15.15-1",
      "fix": "DEBIAN-CVE-2021-46931",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-46931",
      "released": "2024-02-27T10:15:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.15.15-1",
      "fix": "DEBIAN-CVE-2021-46931",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-46931",
      "released": "2024-02-27T10:15:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.15.15-1",
      "fix": "DEBIAN-CVE-2021-46931",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-46931",
      "released": "2024-02-27T10:15:07Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}