CVE-2021-47196: 
Linux Kernel vulnerability analysis and mitigation

CVE-2021-47196 affects the Linux kernel's RDMA (Remote Direct Memory Access) core component. The vulnerability was discovered in the queue pair (QP) creation process where send and receive completion queue (CQ) pointers were not properly set before forwarding to the driver (Kernel Commit).

The vulnerability stems from a race condition in the RDMA core component where the send and receive completion queue pointers were not preset prior to calling the drivers. This specifically affected the mlx5 driver, as QP creation failures would trigger a QP destroy path that relied on proper CQ pointers. The issue manifested as a use-after-free bug that could be detected by KASAN (Kernel Address Sanitizer) during QP creation (Kernel Commit).

The vulnerability could lead to use-after-free conditions in the kernel's RDMA subsystem, potentially causing system crashes or memory corruption. This particularly affects systems using Mellanox MLX5 RDMA hardware (Kernel Commit).

The vulnerability requires access to a system with RDMA hardware, specifically affecting systems using the MLX5 driver. The issue is triggered during QP creation operations, which typically requires privileged access to the RDMA subsystem (Kernel Commit).

The issue has been fixed in the Linux kernel by presetting both receive and send CQ pointers prior to calling the drivers. The fix involves modifying the RDMA core to properly initialize these pointers before driver interaction (Kernel Commit).