CVE-2021-47556: 
Linux Kernel vulnerability analysis and mitigation

CVE-2021-47556 affects the Linux kernel's ethtool functionality, specifically in the ethtool_set_coalesce() function. The vulnerability was discovered in 2021 and involves a potential NULL pointer dereference in the coalesce settings functionality (Kernel Git).

The vulnerability exists in the ethtool_set_coalesce() function where both .get_coalesce() and .set_coalesce() callbacks are used. The check for their availability was buggy, causing a NULL pointer dereference instead of returning -EOPNOTSUPP when a driver provides only one of the callbacks. This occurs specifically in the legacy ioctl path and requires specific driver configurations, such as having .get_coalesce() and .coalesce_supported but no .set_coalesce(), or having .set_coalesce() but no .get_coalesce() (Kernel Git).

The vulnerability could lead to a NULL pointer dereference in the kernel when attempting to change coalesce settings on affected devices. This could potentially cause system crashes or denial of service conditions (Kernel Git).

The vulnerability requires specific conditions to be exploitable, making it relatively difficult to trigger. It only affects the legacy ioctl path and needs particular driver configurations. Standard ethtool usage doesn't trigger the crash as it first attempts to call ethtool_get_coalesce() and exits on error (Kernel Git).

The issue has been fixed by correcting the condition that checks for callback availability, ensuring both callbacks are present before proceeding. The fix changes the logical AND operator to OR in the condition check, matching the behavior of the netlink code (Kernel Git).