{
  "cveId": "CVE-2021-47424",
  "url": "https://patchblox.com/security/cve/CVE-2021-47424",
  "summary": "CVE-2021-47424 is fixed in linux on 1 platform, first by DEBIAN-CVE-2021-47424, released May 21, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  i40e: Fix freeing of uninitialized misc IRQ vect...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  i40e: Fix freeing of uninitialized misc IRQ vector  When VSI set up failed in i40e_probe() as part of PF switch set up driver was trying to free misc IRQ vectors in i40e_clear_interrupt_scheme and produced a kernel Oops:     Trying to free already-free IRQ 266    WARNING: CPU: 0 PID: 5 at kernel/irq/manage.c:1731 __free_irq\u002B0x9a/0x300    Workqueue: events work_for_cpu_fn    RIP: 0010:__free_irq\u002B0x9a/0x300    Call Trace:    ? synchronize_irq\u002B0x3a/0xa0    free_irq\u002B0x2e/0x60    i40e_clear_interrupt_scheme\u002B0x53/0x190 [i40e]    i40e_probe.part.108\u002B0x134b/0x1a40 [i40e]    ? kmem_cache_alloc\u002B0x158/0x1c0    ? acpi_ut_update_ref_count.part.1\u002B0x8e/0x345    ? acpi_ut_update_object_reference\u002B0x15e/0x1e2    ? strstr\u002B0x21/0x70    ? irq_get_irq_data\u002B0xa/0x20    ? mp_check_pin_attr\u002B0x13/0xc0    ? irq_get_irq_data\u002B0xa/0x20    ? mp_map_pin_to_irq\u002B0xd3/0x2f0    ? acpi_register_gsi_ioapic\u002B0x93/0x170    ? pci_conf1_read\u002B0xa4/0x100    ? pci_bus_read_config_word\u002B0x49/0x70    ? do_pci_enable_device\u002B0xcc/0x100    local_pci_probe\u002B0x41/0x90    work_for_cpu_fn\u002B0x16/0x20    process_one_work\u002B0x1a7/0x360    worker_thread\u002B0x1cf/0x390    ? create_worker\u002B0x1a0/0x1a0    kthread\u002B0x112/0x130    ? kthread_flush_work_fn\u002B0x10/0x10    ret_from_fork\u002B0x1f/0x40  The problem is that at that point misc IRQ vectors were not allocated yet and we get a call trace that driver is trying to free already free IRQ vectors.  Add a check in i40e_clear_interrupt_scheme for __I40E_MISC_IRQ_REQUESTED PF state before calling i40e_free_misc_vector. This state is set only if misc IRQ vectors were properly initialized.",
  "published": "2024-05-21T15:15:27Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00222,
  "epssPercentile": 0.12926,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.14.12-1",
      "fix": "DEBIAN-CVE-2021-47424",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47424",
      "released": "2024-05-21T15:15:27Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.14.12-1",
      "fix": "DEBIAN-CVE-2021-47424",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47424",
      "released": "2024-05-21T15:15:27Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.14.12-1",
      "fix": "DEBIAN-CVE-2021-47424",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47424",
      "released": "2024-05-21T15:15:27Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}