CVE-2021-47301

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47301
In the Linux kernel, the following vulnerability has been resolved: igb: Fix use-after-free error during reset Cleans the next descriptor to watch (next_to_watch) when cleaning the TX ring. Failure to do so can cause invalid memory accesses. If igb_poll() runs while the controller is reset this can lead to the driver try to free a skb that was already freed. (The crash is harder to reproduce with the igb driver, but the same potential problem exists as the code is identical to igc)

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/7b292608db23ccbbfbfa50cdb155d01725d7a52e Patch
https://git.kernel.org/stable/c/88e0720133d42d34851c8721cf5f289a50a8710f Patch
https://git.kernel.org/stable/c/8e24c12f2ff6d32fd9f057382f08e748ec97194c Patch
https://git.kernel.org/stable/c/d3ccb18ed5ac3283c7b31ecc685b499e580d5492 Patch
https://git.kernel.org/stable/c/d7367f781e5a9ca5df9082b15b272b55e76931f8 Patch
https://git.kernel.org/stable/c/f153664d8e70c11d0371341613651e1130e20240 Patch
https://git.kernel.org/stable/c/7b292608db23ccbbfbfa50cdb155d01725d7a52e Patch
https://git.kernel.org/stable/c/88e0720133d42d34851c8721cf5f289a50a8710f Patch
https://git.kernel.org/stable/c/8e24c12f2ff6d32fd9f057382f08e748ec97194c Patch
https://git.kernel.org/stable/c/d3ccb18ed5ac3283c7b31ecc685b499e580d5492 Patch
https://git.kernel.org/stable/c/d7367f781e5a9ca5df9082b15b272b55e76931f8 Patch
https://git.kernel.org/stable/c/f153664d8e70c11d0371341613651e1130e20240 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.14:rc1:*:*:*:*:*:*
History

26 Dec 2024, 20:44

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/7b292608db23ccbbfbfa50cdb155d01725d7a52e - () https://git.kernel.org/stable/c/7b292608db23ccbbfbfa50cdb155d01725d7a52e - Patch
References () https://git.kernel.org/stable/c/88e0720133d42d34851c8721cf5f289a50a8710f - () https://git.kernel.org/stable/c/88e0720133d42d34851c8721cf5f289a50a8710f - Patch
References () https://git.kernel.org/stable/c/8e24c12f2ff6d32fd9f057382f08e748ec97194c - () https://git.kernel.org/stable/c/8e24c12f2ff6d32fd9f057382f08e748ec97194c - Patch
References () https://git.kernel.org/stable/c/d3ccb18ed5ac3283c7b31ecc685b499e580d5492 - () https://git.kernel.org/stable/c/d3ccb18ed5ac3283c7b31ecc685b499e580d5492 - Patch
References () https://git.kernel.org/stable/c/d7367f781e5a9ca5df9082b15b272b55e76931f8 - () https://git.kernel.org/stable/c/d7367f781e5a9ca5df9082b15b272b55e76931f8 - Patch
References () https://git.kernel.org/stable/c/f153664d8e70c11d0371341613651e1130e20240 - () https://git.kernel.org/stable/c/f153664d8e70c11d0371341613651e1130e20240 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:5.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-416

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/7b292608db23ccbbfbfa50cdb155d01725d7a52e - () https://git.kernel.org/stable/c/7b292608db23ccbbfbfa50cdb155d01725d7a52e -
References () https://git.kernel.org/stable/c/88e0720133d42d34851c8721cf5f289a50a8710f - () https://git.kernel.org/stable/c/88e0720133d42d34851c8721cf5f289a50a8710f -
References () https://git.kernel.org/stable/c/8e24c12f2ff6d32fd9f057382f08e748ec97194c - () https://git.kernel.org/stable/c/8e24c12f2ff6d32fd9f057382f08e748ec97194c -
References () https://git.kernel.org/stable/c/d3ccb18ed5ac3283c7b31ecc685b499e580d5492 - () https://git.kernel.org/stable/c/d3ccb18ed5ac3283c7b31ecc685b499e580d5492 -
References () https://git.kernel.org/stable/c/d7367f781e5a9ca5df9082b15b272b55e76931f8 - () https://git.kernel.org/stable/c/d7367f781e5a9ca5df9082b15b272b55e76931f8 -
References () https://git.kernel.org/stable/c/f153664d8e70c11d0371341613651e1130e20240 - () https://git.kernel.org/stable/c/f153664d8e70c11d0371341613651e1130e20240 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: igb: corrige el error de use after free durante el reinicio. Limpia el siguiente descriptor a observar (next_to_watch) al limpiar el anillo TX. De lo contrario, se pueden producir accesos a la memoria no válidos. Si igb_poll() se ejecuta mientras se reinicia el controlador, esto puede hacer que el controlador intente liberar un skb que ya estaba liberado. (El fallo es más difícil de reproducir con el controlador igb, pero existe el mismo problema potencial ya que el código es idéntico al de igc)

21 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 15:15

Updated : 2024-12-26 20:44

NVD link : CVE-2021-47301

Mitre link : CVE-2021-47301

CVE.ORG link : CVE-2021-47301

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free