CVE-2021-47311

Katalog CVE

CVSS 7.8 · High EPSS 0,25%

Kerentanan Use After Free pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: net: qcom/emac: fix UAF in emac_remove adpt is netdev private data and it cannot be used after free_netdev() call. Using adpt after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function.

Rincian

Terbit di NVD

21 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 15,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/11e9d163d631198bb3eb41a677a61b499516c0f7 patch
• https://git.kernel.org/stable/c/2b70ca92847c619d6264c7372ef74fcbfd1e048c patch
• https://git.kernel.org/stable/c/4d04a42b926e682140776e54188f4a44f1f01a81 patch
• https://git.kernel.org/stable/c/8a225a6e07a57a1538d53637cb3d82bd3e477839 patch
• https://git.kernel.org/stable/c/ad297cd2db8953e2202970e9504cab247b6c7cb4 patch
• https://git.kernel.org/stable/c/b1e091331920f8fbfc747dcbd16263fcd71abb2d patch
• https://git.kernel.org/stable/c/b560521eca03d0a2db6093a5a632cbdd0a0cf833 patch