Security readout for executives and security teams
Plain-English summary
This is a Linux kernel crash bug in the NVMe target over RDMA path. Under certain RDMA transport error conditions, the kernel can dereference a null pointer and crash. It matters most for storage servers exposing NVMe-oF over RDMA, not ordinary Linux endpoints.
Executive priority
Treat as a storage-infrastructure reliability issue. Prioritize patching on Linux NVMe-oF RDMA target systems, especially where storage availability is business-critical. Broader enterprise urgency is lower if this RDMA target role is not present.
Technical view
The issue is in nvmet-rdma error completion handling. After shared completion queue changes, cq_context was no longer a valid source for the queue; SEND completion errors could lead nvmet_rdma_error_comp to access invalid/null context. Upstream stable commits correct queue lookup via the work completion queue pair.
Likely exposure
Exposure is likely limited to Linux systems acting as NVMe-oF RDMA targets using the nvmet-rdma kernel component. The source record names Linux 5.9 and later affected ranges with fixes in stable release lines. General-purpose servers not using NVMe target RDMA are unlikely to be exposed.
Exploitation context
The provided record describes crashes during traffic when the peer link is taken down and transport retry count is exceeded. It does not cite active exploitation, remote weaponization, privilege escalation, or data theft. CISA KEV status is false in the supplied bundle.
Researcher notes
Evidence supports a NULL pointer dereference leading to kernel oops in nvmet-rdma after SEND completion errors. The record provides fix commits but no CVSS, CWE, exploit proof, or affected distribution package mapping. Distribution backports may alter version-based exposure conclusions.
Mitigation direction
- Update to a vendor kernel containing the referenced upstream stable fixes.
- Check distribution advisories for backported fixes matching your kernel package.
- Prioritize systems running NVMe-oF targets over RDMA fabrics.
- If unused, review vendor guidance for disabling nvmet-rdma exposure.
- Avoid direct wrangler-style assumptions; follow kernel vendor maintenance guidance.
Validation and detection
- Inventory Linux kernel versions on RDMA-backed storage target hosts.
- Confirm whether nvmet-rdma or NVMe-oF RDMA target functionality is enabled.
- Review kernel logs for nvmet_rdma SEND errors and null dereference traces.
- Verify installed kernel changelogs include the referenced stable fix commits.
- Test remediation in a storage lab before production rollout.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2021-46983 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/64f3410c7bfc389b1a58611d0799f4a36ce4b6b5CVE reference, Linux
- https://git.kernel.org/stable/c/17fb6dfa5162b89ecfa07df891a53afec321abe8CVE reference, Linux
- https://git.kernel.org/stable/c/5bdb34466ad8370546dfa0497594fb1d6f2fed90CVE reference, Linux
- https://git.kernel.org/stable/c/8cc365f9559b86802afc0208389f5c8d46b4ad61CVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.