CVE-2021-47251
published 2024-05-21CVE-2021-47251: In the Linux kernel, the following vulnerability has been resolved: mac80211: fix skb length check in ieee80211_scan_rx() Replace hard-coded compile-time…
PriorityP336high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.23%
14.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
mac80211: fix skb length check in ieee80211_scan_rx()
Replace hard-coded compile-time constants for header length check
with dynamic determination based on the frame type. Otherwise, we
hit a validation WARN_ON in cfg80211 later.
[style fixes, reword commit message]
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.10.46-1 (bookworm) | linux 5.10.46-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= cd418ba63f0c2f6157f35a41c9accc6ecb52590a < 5a1cd67a801cf5ef989c4783e07b86a25b143126 | 5a1cd67a801cf5ef989c4783e07b86a25b143126 |
| linux | linux | >= cd418ba63f0c2f6157f35a41c9accc6ecb52590a < d1b949c70206178b12027f66edc088d40375b5cb | d1b949c70206178b12027f66edc088d40375b5cb |
| linux | linux | >= cd418ba63f0c2f6157f35a41c9accc6ecb52590a < e298aa358f0ca658406d524b6639fe389cb6e11e | e298aa358f0ca658406d524b6639fe389cb6e11e |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 5.10 < 5.10.46 | 5.10.46 |
| linux | linux_kernel | >= 5.11 < 5.12.13 | 5.12.13 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: mac80211: fix skb length check in ieee80211_scan_rx()
vendor_redhat·2024-05-21·CVSS 7.8
CVE-2021-47251 [HIGH] CWE-99 kernel: mac80211: fix skb length check in ieee80211_scan_rx()
kernel: mac80211: fix skb length check in ieee80211_scan_rx()
In the Linux kernel, the following vulnerability has been resolved:
mac80211: fix skb length check in ieee80211_scan_rx()
Replace hard-coded compile-time constants for header length check
with dynamic determination based on the frame type. Otherwise, we
hit a validation WARN_ON in cfg80211 later.
[style fixes, reword commit message]
Statement: Red Hat has stack protection mechanisms in place, such as FORTIFY_SOURCE, Position Independent Executables or Stack Smashing Protection.
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel (Red Hat Enterprise Linux
Debian
CVE-2021-47251: linux - In the Linux kernel, the following vulnerability has been resolved: mac80211: f...
vendor_debian·2021·CVSS 7.8
CVE-2021-47251 [HIGH] CVE-2021-47251: linux - In the Linux kernel, the following vulnerability has been resolved: mac80211: f...
In the Linux kernel, the following vulnerability has been resolved: mac80211: fix skb length check in ieee80211_scan_rx() Replace hard-coded compile-time constants for header length check with dynamic determination based on the frame type. Otherwise, we hit a validation WARN_ON in cfg80211 later. [style fixes, reword commit message]
Scope: local
bookworm: resolved (fixed in 5.10.46-1)
bullseye: resolved (fixed in 5.10.46-1)
forky: resolved (fixed in 5.10.46-1)
sid: resolved (fixed in 5.10.46-1)
trixie: resolved (fixed in 5.10.46-1)
OSV
CVE-2021-47251: In the Linux kernel, the following vulnerability has been resolved: mac80211: fix skb length check in ieee80211_scan_rx() Replace hard-coded compile-t
osv·2024-05-21·CVSS 7.8
CVE-2021-47251 [HIGH] CVE-2021-47251: In the Linux kernel, the following vulnerability has been resolved: mac80211: fix skb length check in ieee80211_scan_rx() Replace hard-coded compile-t
In the Linux kernel, the following vulnerability has been resolved: mac80211: fix skb length check in ieee80211_scan_rx() Replace hard-coded compile-time constants for header length check with dynamic determination based on the frame type. Otherwise, we hit a validation WARN_ON in cfg80211 later. [style fixes, reword commit message]
GHSA
GHSA-grwp-8243-xpjh: In the Linux kernel, the following vulnerability has been resolved:
mac80211: fix skb length check in ieee80211_scan_rx()
Replace hard-coded compile
ghsa_unreviewed·2024-05-21
CVE-2021-47251 [HIGH] CWE-1284 GHSA-grwp-8243-xpjh: In the Linux kernel, the following vulnerability has been resolved:
mac80211: fix skb length check in ieee80211_scan_rx()
Replace hard-coded compile
In the Linux kernel, the following vulnerability has been resolved:
mac80211: fix skb length check in ieee80211_scan_rx()
Replace hard-coded compile-time constants for header length check
with dynamic determination based on the frame type. Otherwise, we
hit a validation WARN_ON in cfg80211 later.
[style fixes, reword commit message]
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/5a1cd67a801cf5ef989c4783e07b86a25b143126https://git.kernel.org/stable/c/d1b949c70206178b12027f66edc088d40375b5cbhttps://git.kernel.org/stable/c/e298aa358f0ca658406d524b6639fe389cb6e11ehttps://git.kernel.org/stable/c/5a1cd67a801cf5ef989c4783e07b86a25b143126https://git.kernel.org/stable/c/d1b949c70206178b12027f66edc088d40375b5cbhttps://git.kernel.org/stable/c/e298aa358f0ca658406d524b6639fe389cb6e11e
2024-05-21
Published