CVE-2021-47311
published 2024-05-21CVE-2021-47311: In the Linux kernel, the following vulnerability has been resolved: net: qcom/emac: fix UAF in emac_remove adpt is netdev private data and it cannot be used…
PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.25%
16.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: qcom/emac: fix UAF in emac_remove
adpt is netdev private data and it cannot be
used after free_netdev() call. Using adpt after free_netdev()
can cause UAF bug. Fix it by moving free_netdev() at the end of the
function.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.14.6-1 (bookworm) | linux 5.14.6-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 54e19bc74f3380d414681762ceed9f7245bc6a6e < 4d04a42b926e682140776e54188f4a44f1f01a81 | 4d04a42b926e682140776e54188f4a44f1f01a81 |
| linux | linux | >= 54e19bc74f3380d414681762ceed9f7245bc6a6e < b1e091331920f8fbfc747dcbd16263fcd71abb2d | b1e091331920f8fbfc747dcbd16263fcd71abb2d |
| linux | linux | >= 54e19bc74f3380d414681762ceed9f7245bc6a6e < 11e9d163d631198bb3eb41a677a61b499516c0f7 | 11e9d163d631198bb3eb41a677a61b499516c0f7 |
| linux | linux | >= 54e19bc74f3380d414681762ceed9f7245bc6a6e < 2b70ca92847c619d6264c7372ef74fcbfd1e048c | 2b70ca92847c619d6264c7372ef74fcbfd1e048c |
| linux | linux | >= 54e19bc74f3380d414681762ceed9f7245bc6a6e < b560521eca03d0a2db6093a5a632cbdd0a0cf833 | b560521eca03d0a2db6093a5a632cbdd0a0cf833 |
| linux | linux | >= 54e19bc74f3380d414681762ceed9f7245bc6a6e < 8a225a6e07a57a1538d53637cb3d82bd3e477839 | 8a225a6e07a57a1538d53637cb3d82bd3e477839 |
| linux | linux | >= 54e19bc74f3380d414681762ceed9f7245bc6a6e < ad297cd2db8953e2202970e9504cab247b6c7cb4 | ad297cd2db8953e2202970e9504cab247b6c7cb4 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.70-1 | 5.10.70-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 4.10 < 4.14.241 | 4.14.241 |
| linux | linux_kernel | >= 4.15 < 4.19.199 | 4.19.199 |
| linux | linux_kernel | >= 4.20 < 5.4.135 | 5.4.135 |
| linux | linux_kernel | >= 4.9 < 4.9.277 | 4.9.277 |
| linux | linux_kernel | >= 5.11 < 5.13.5 | 5.13.5 |
| linux | linux_kernel | >= 5.5 < 5.10.53 | 5.10.53 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2021-47311: In the Linux kernel, the following vulnerability has been resolved: net: qcom/emac: fix UAF in emac_remove adpt is netdev private data and it cannot b
osv·2024-05-21·CVSS 7.8
CVE-2021-47311 [HIGH] CVE-2021-47311: In the Linux kernel, the following vulnerability has been resolved: net: qcom/emac: fix UAF in emac_remove adpt is netdev private data and it cannot b
In the Linux kernel, the following vulnerability has been resolved: net: qcom/emac: fix UAF in emac_remove adpt is netdev private data and it cannot be used after free_netdev() call. Using adpt after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function.
GHSA
GHSA-2hq2-46wf-3mhv: In the Linux kernel, the following vulnerability has been resolved:
net: qcom/emac: fix UAF in emac_remove
adpt is netdev private data and it cannot
ghsa_unreviewed·2024-05-21
CVE-2021-47311 [HIGH] CWE-416 GHSA-2hq2-46wf-3mhv: In the Linux kernel, the following vulnerability has been resolved:
net: qcom/emac: fix UAF in emac_remove
adpt is netdev private data and it cannot
In the Linux kernel, the following vulnerability has been resolved:
net: qcom/emac: fix UAF in emac_remove
adpt is netdev private data and it cannot be
used after free_netdev() call. Using adpt after free_netdev()
can cause UAF bug. Fix it by moving free_netdev() at the end of the
function.
Red Hat
kernel: net: qcom/emac: fix UAF in emac_remove
vendor_redhat·2024-05-21·CVSS 7.8
CVE-2021-47311 [HIGH] CWE-416 kernel: net: qcom/emac: fix UAF in emac_remove
kernel: net: qcom/emac: fix UAF in emac_remove
In the Linux kernel, the following vulnerability has been resolved:
net: qcom/emac: fix UAF in emac_remove
adpt is netdev private data and it cannot be
used after free_netdev() call. Using adpt after free_netdev()
can cause UAF bug. Fix it by moving free_netdev() at the end of the
function.
A vulnerability was found in the Linux kernel's Qualcomm EMAC driver, where the emac_remove function can lead to a use-after-free issue when the driver tries to access data after the network device has been freed, causing instability and a crash in the network subsystem.
Statement: This vulnerability is rated as a moderate severity because the use-after-free can disrupt the network operations, leading to potential service interruptions, but it does not d
Debian
CVE-2021-47311: linux - In the Linux kernel, the following vulnerability has been resolved: net: qcom/e...
vendor_debian·2021·CVSS 7.8
CVE-2021-47311 [HIGH] CVE-2021-47311: linux - In the Linux kernel, the following vulnerability has been resolved: net: qcom/e...
In the Linux kernel, the following vulnerability has been resolved: net: qcom/emac: fix UAF in emac_remove adpt is netdev private data and it cannot be used after free_netdev() call. Using adpt after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function.
Scope: local
bookworm: resolved (fixed in 5.14.6-1)
bullseye: resolved (fixed in 5.10.70-1)
forky: resolved (fixed in 5.14.6-1)
sid: resolved (fixed in 5.14.6-1)
trixie: resolved (fixed in 5.14.6-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/11e9d163d631198bb3eb41a677a61b499516c0f7https://git.kernel.org/stable/c/2b70ca92847c619d6264c7372ef74fcbfd1e048chttps://git.kernel.org/stable/c/4d04a42b926e682140776e54188f4a44f1f01a81https://git.kernel.org/stable/c/8a225a6e07a57a1538d53637cb3d82bd3e477839https://git.kernel.org/stable/c/ad297cd2db8953e2202970e9504cab247b6c7cb4https://git.kernel.org/stable/c/b1e091331920f8fbfc747dcbd16263fcd71abb2dhttps://git.kernel.org/stable/c/b560521eca03d0a2db6093a5a632cbdd0a0cf833https://git.kernel.org/stable/c/11e9d163d631198bb3eb41a677a61b499516c0f7https://git.kernel.org/stable/c/2b70ca92847c619d6264c7372ef74fcbfd1e048chttps://git.kernel.org/stable/c/4d04a42b926e682140776e54188f4a44f1f01a81https://git.kernel.org/stable/c/8a225a6e07a57a1538d53637cb3d82bd3e477839https://git.kernel.org/stable/c/ad297cd2db8953e2202970e9504cab247b6c7cb4https://git.kernel.org/stable/c/b1e091331920f8fbfc747dcbd16263fcd71abb2dhttps://git.kernel.org/stable/c/b560521eca03d0a2db6093a5a632cbdd0a0cf833
2024-05-21
Published