CVE-2021-47311

Published: May 21, 2024Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: net: qcom/emac: fix UAF in emac_remove adpt is netdev private data and it cannot be used after free_netdev() call. Using adpt after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function.

Affected (7)

Products: Linux: Linux Kernel

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 4.10 to 4.14.241
Linux Linux Kernel	From 4.15 to 4.19.199
Linux Linux Kernel	From 4.20 to 5.4.135
Linux Linux Kernel	From 4.9 to 4.9.277
Linux Linux Kernel	From 5.11 to 5.13.5
Linux Linux Kernel	From 5.5 to 5.10.53
Linux Linux Kernel	Version 5.14 rc1

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (14)

https://git.kernel.org/stable/c/11e9d163d631198bb3eb41a677a61b499516c0f7

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/2b70ca92847c619d6264c7372ef74fcbfd1e048c

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/4d04a42b926e682140776e54188f4a44f1f01a81

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/8a225a6e07a57a1538d53637cb3d82bd3e477839

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/ad297cd2db8953e2202970e9504cab247b6c7cb4

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/b1e091331920f8fbfc747dcbd16263fcd71abb2d

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/b560521eca03d0a2db6093a5a632cbdd0a0cf833

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/11e9d163d631198bb3eb41a677a61b499516c0f7

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/2b70ca92847c619d6264c7372ef74fcbfd1e048c

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/4d04a42b926e682140776e54188f4a44f1f01a81

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/8a225a6e07a57a1538d53637cb3d82bd3e477839

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/ad297cd2db8953e2202970e9504cab247b6c7cb4

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/b1e091331920f8fbfc747dcbd16263fcd71abb2d

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/b560521eca03d0a2db6093a5a632cbdd0a0cf833

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.