CVE-2021-47398: 
Linux Kernel vulnerability analysis and mitigation

CVE-2021-47398 affects the Linux kernel's RDMA/hfi1 component. The vulnerability was discovered and disclosed in May 2024, involving a kernel pointer leak in the HFI1 driver. The issue occurs when pointers are incorrectly printed using %llx format specifier instead of the secure %p or %px specifiers (NVD).

The vulnerability exists in the HFI1 driver's pointer printing implementation where pointers are cast to 'unsigned long long' and printed with %llx format specifier instead of using the secure %p or %px format specifiers. This occurs specifically in the ipoib_tx.c file within the timeout handler for rdma_netdev (Kernel Commit).

The vulnerability could lead to information disclosure by leaking kernel pointer addresses, which could potentially be used by attackers to bypass kernel address space layout randomization (KASLR) and facilitate further attacks (NVD).

The issue has been fixed by changing the format specifier from %llx to %p for printing pointer addresses in the affected code. The fix was implemented in kernel commit 7d5cfafe8b4006a75b55c2f1fdfdb363f9a5cc98 (Kernel Commit).