CVE-2021-46973
published 2024-02-27CVE-2021-46973: In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Avoid potential use after free in MHI send It is possible that the MHI…
PriorityP338high8.4CVSS 3.1
AVLACLPRNUINSUCHIHAH
EPSS
0.24%
14.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: qrtr: Avoid potential use after free in MHI send
It is possible that the MHI ul_callback will be invoked immediately
following the queueing of the skb for transmission, leading to the
callback decrementing the refcount of the associated sk and freeing the
skb.
As such the dereference of skb and the increment of the sk refcount must
happen before the skb is queued, to avoid the skb to be used after free
and potentially the sk to drop its last refcount..
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.10.38-1 (bookworm) | linux 5.10.38-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 6e728f321393b1fce9e1c2c3e55f9f7c15991321 < 48ec949ac979b4b42d740f67b6177797af834f80 | 48ec949ac979b4b42d740f67b6177797af834f80 |
| linux | linux | >= 6e728f321393b1fce9e1c2c3e55f9f7c15991321 < ea474054c2cc6e1284604b21361f475c7cc8c0a0 | ea474054c2cc6e1284604b21361f475c7cc8c0a0 |
| linux | linux | >= 6e728f321393b1fce9e1c2c3e55f9f7c15991321 < 03c649dee8b1eb5600212a249542a70f47a5ab40 | 03c649dee8b1eb5600212a249542a70f47a5ab40 |
| linux | linux | >= 6e728f321393b1fce9e1c2c3e55f9f7c15991321 < 47a017f33943278570c072bc71681809b2567b3a | 47a017f33943278570c072bc71681809b2567b3a |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | 5.11 – 5.11.19 | — |
| linux | linux_kernel | 5.12 – 5.12.2 | — |
| linux | linux_kernel | 5.8 – 5.10.35 | — |
CVSS provenance
nvdv3.18.4HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv8.4HIGH
vendor_debian8.4HIGH
vendor_redhat8.4HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: net: qrtr: Avoid potential use after free in MHI send
vendor_redhat·2024-02-27·CVSS 8.4
CVE-2021-46973 [HIGH] CWE-416 kernel: net: qrtr: Avoid potential use after free in MHI send
kernel: net: qrtr: Avoid potential use after free in MHI send
In the Linux kernel, the following vulnerability has been resolved:
net: qrtr: Avoid potential use after free in MHI send
It is possible that the MHI ul_callback will be invoked immediately
following the queueing of the skb for transmission, leading to the
callback decrementing the refcount of the associated sk and freeing the
skb.
As such the dereference of skb and the increment of the sk refcount must
happen before the skb is queued, to avoid the skb to be used after free
and potentially the sk to drop its last refcount..
A use-after-free flaw was found in the Linux kernel. This issue may lead to compromised availability.
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterpris
Debian
CVE-2021-46973: linux - In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ...
vendor_debian·2021·CVSS 8.4
CVE-2021-46973 [HIGH] CVE-2021-46973: linux - In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ...
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Avoid potential use after free in MHI send It is possible that the MHI ul_callback will be invoked immediately following the queueing of the skb for transmission, leading to the callback decrementing the refcount of the associated sk and freeing the skb. As such the dereference of skb and the increment of the sk refcount must happen before the skb is queued, to avoid the skb to be used after free and potentially the sk to drop its last refcount..
Scope: local
bookworm: resolved (fixed in 5.10.38-1)
bullseye: resolved (fixed in 5.10.38-1)
forky: resolved (fixed in 5.10.38-1)
sid: resolved (fixed in 5.10.38-1)
trixie: resolved (fixed in 5.10.38-1)
OSV
CVE-2021-46973: In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Avoid potential use after free in MHI send It is possible that the MHI
osv·2024-02-27·CVSS 8.4
CVE-2021-46973 [HIGH] CVE-2021-46973: In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Avoid potential use after free in MHI send It is possible that the MHI
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Avoid potential use after free in MHI send It is possible that the MHI ul_callback will be invoked immediately following the queueing of the skb for transmission, leading to the callback decrementing the refcount of the associated sk and freeing the skb. As such the dereference of skb and the increment of the sk refcount must happen before the skb is queued, to avoid the skb to be used after free and potentially the sk to drop its last refcount..
GHSA
GHSA-pwwc-8qxc-5w7f: In the Linux kernel, the following vulnerability has been resolved:
net: qrtr: Avoid potential use after free in MHI send
It is possible that the MH
ghsa_unreviewed·2024-02-27
CVE-2021-46973 [HIGH] CWE-416 GHSA-pwwc-8qxc-5w7f: In the Linux kernel, the following vulnerability has been resolved:
net: qrtr: Avoid potential use after free in MHI send
It is possible that the MH
In the Linux kernel, the following vulnerability has been resolved:
net: qrtr: Avoid potential use after free in MHI send
It is possible that the MHI ul_callback will be invoked immediately
following the queueing of the skb for transmission, leading to the
callback decrementing the refcount of the associated sk and freeing the
skb.
As such the dereference of skb and the increment of the sk refcount must
happen before the skb is queued, to avoid the skb to be used after free
and potentially the sk to drop its last refcount..
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/03c649dee8b1eb5600212a249542a70f47a5ab40https://git.kernel.org/stable/c/47a017f33943278570c072bc71681809b2567b3ahttps://git.kernel.org/stable/c/48ec949ac979b4b42d740f67b6177797af834f80https://git.kernel.org/stable/c/ea474054c2cc6e1284604b21361f475c7cc8c0a0https://git.kernel.org/stable/c/03c649dee8b1eb5600212a249542a70f47a5ab40https://git.kernel.org/stable/c/47a017f33943278570c072bc71681809b2567b3ahttps://git.kernel.org/stable/c/48ec949ac979b4b42d740f67b6177797af834f80https://git.kernel.org/stable/c/ea474054c2cc6e1284604b21361f475c7cc8c0a0
2024-02-27
Published