CVE-2021-47301
published 2024-05-21CVE-2021-47301: In the Linux kernel, the following vulnerability has been resolved: igb: Fix use-after-free error during reset Cleans the next descriptor to watch…
PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.24%
15.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
igb: Fix use-after-free error during reset
Cleans the next descriptor to watch (next_to_watch) when cleaning the
TX ring.
Failure to do so can cause invalid memory accesses. If igb_poll() runs
while the controller is reset this can lead to the driver try to free
a skb that was already freed.
(The crash is harder to reproduce with the igb driver, but the same
potential problem exists as the code is identical to igc)
Affected
18 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.14.6-1 (bookworm) | linux 5.14.6-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0 < d7367f781e5a9ca5df9082b15b272b55e76931f8 | d7367f781e5a9ca5df9082b15b272b55e76931f8 |
| linux | linux | >= 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0 < d3ccb18ed5ac3283c7b31ecc685b499e580d5492 | d3ccb18ed5ac3283c7b31ecc685b499e580d5492 |
| linux | linux | >= 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0 < 88e0720133d42d34851c8721cf5f289a50a8710f | 88e0720133d42d34851c8721cf5f289a50a8710f |
| linux | linux | >= 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0 < f153664d8e70c11d0371341613651e1130e20240 | f153664d8e70c11d0371341613651e1130e20240 |
| linux | linux | >= 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0 < 8e24c12f2ff6d32fd9f057382f08e748ec97194c | 8e24c12f2ff6d32fd9f057382f08e748ec97194c |
| linux | linux | >= 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0 < 7b292608db23ccbbfbfa50cdb155d01725d7a52e | 7b292608db23ccbbfbfa50cdb155d01725d7a52e |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.70-1 | 5.10.70-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 4.12 < 4.14.241 | 4.14.241 |
| linux | linux_kernel | >= 4.15 < 4.19.199 | 4.19.199 |
| linux | linux_kernel | >= 4.20 < 5.4.136 | 5.4.136 |
| linux | linux_kernel | >= 5.11 < 5.13.6 | 5.13.6 |
| linux | linux_kernel | >= 5.5 < 5.10.54 | 5.10.54 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: igb: Fix use-after-free error during reset
vendor_redhat·2024-05-21·CVSS 7.8
CVE-2021-47301 [HIGH] CWE-416 kernel: igb: Fix use-after-free error during reset
kernel: igb: Fix use-after-free error during reset
In the Linux kernel, the following vulnerability has been resolved:
igb: Fix use-after-free error during reset
Cleans the next descriptor to watch (next_to_watch) when cleaning the
TX ring.
Failure to do so can cause invalid memory accesses. If igb_poll() runs
while the controller is reset this can lead to the driver try to free
a skb that was already freed.
(The crash is harder to reproduce with the igb driver, but the same
potential problem exists as the code is identical to igc)
A vulnerability was found in the Linux kernel's igb driver. During a reset operation, the driver could access memory that had already been freed. If the driver attempts to use this freed memory, it can lead to a system crash or instability because the memory m
Debian
CVE-2021-47301: linux - In the Linux kernel, the following vulnerability has been resolved: igb: Fix us...
vendor_debian·2021·CVSS 7.8
CVE-2021-47301 [HIGH] CVE-2021-47301: linux - In the Linux kernel, the following vulnerability has been resolved: igb: Fix us...
In the Linux kernel, the following vulnerability has been resolved: igb: Fix use-after-free error during reset Cleans the next descriptor to watch (next_to_watch) when cleaning the TX ring. Failure to do so can cause invalid memory accesses. If igb_poll() runs while the controller is reset this can lead to the driver try to free a skb that was already freed. (The crash is harder to reproduce with the igb driver, but the same potential problem exists as the code is identical to igc)
Scope: local
bookworm: resolved (fixed in 5.14.6-1)
bullseye: resolved (fixed in 5.10.70-1)
forky: resolved (fixed in 5.14.6-1)
sid: resolved (fixed in 5.14.6-1)
trixie: resolved (fixed in 5.14.6-1)
GHSA
GHSA-9h2q-cwg7-7wx8: In the Linux kernel, the following vulnerability has been resolved:
igb: Fix use-after-free error during reset
Cleans the next descriptor to watch (
ghsa_unreviewed·2024-05-21
CVE-2021-47301 [HIGH] CWE-416 GHSA-9h2q-cwg7-7wx8: In the Linux kernel, the following vulnerability has been resolved:
igb: Fix use-after-free error during reset
Cleans the next descriptor to watch (
In the Linux kernel, the following vulnerability has been resolved:
igb: Fix use-after-free error during reset
Cleans the next descriptor to watch (next_to_watch) when cleaning the
TX ring.
Failure to do so can cause invalid memory accesses. If igb_poll() runs
while the controller is reset this can lead to the driver try to free
a skb that was already freed.
(The crash is harder to reproduce with the igb driver, but the same
potential problem exists as the code is identical to igc)
OSV
CVE-2021-47301: In the Linux kernel, the following vulnerability has been resolved: igb: Fix use-after-free error during reset Cleans the next descriptor to watch (ne
osv·2024-05-21·CVSS 7.8
CVE-2021-47301 [HIGH] CVE-2021-47301: In the Linux kernel, the following vulnerability has been resolved: igb: Fix use-after-free error during reset Cleans the next descriptor to watch (ne
In the Linux kernel, the following vulnerability has been resolved: igb: Fix use-after-free error during reset Cleans the next descriptor to watch (next_to_watch) when cleaning the TX ring. Failure to do so can cause invalid memory accesses. If igb_poll() runs while the controller is reset this can lead to the driver try to free a skb that was already freed. (The crash is harder to reproduce with the igb driver, but the same potential problem exists as the code is identical to igc)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/7b292608db23ccbbfbfa50cdb155d01725d7a52ehttps://git.kernel.org/stable/c/88e0720133d42d34851c8721cf5f289a50a8710fhttps://git.kernel.org/stable/c/8e24c12f2ff6d32fd9f057382f08e748ec97194chttps://git.kernel.org/stable/c/d3ccb18ed5ac3283c7b31ecc685b499e580d5492https://git.kernel.org/stable/c/d7367f781e5a9ca5df9082b15b272b55e76931f8https://git.kernel.org/stable/c/f153664d8e70c11d0371341613651e1130e20240https://git.kernel.org/stable/c/7b292608db23ccbbfbfa50cdb155d01725d7a52ehttps://git.kernel.org/stable/c/88e0720133d42d34851c8721cf5f289a50a8710fhttps://git.kernel.org/stable/c/8e24c12f2ff6d32fd9f057382f08e748ec97194chttps://git.kernel.org/stable/c/d3ccb18ed5ac3283c7b31ecc685b499e580d5492https://git.kernel.org/stable/c/d7367f781e5a9ca5df9082b15b272b55e76931f8https://git.kernel.org/stable/c/f153664d8e70c11d0371341613651e1130e20240
2024-05-21
Published