CVE-2021-47602
published 2024-06-19CVE-2021-47602: In the Linux kernel, the following vulnerability has been resolved: mac80211: track only QoS data frames for admission control For admission control, obviously…
PriorityP421medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
12.9th percentile
In the Linux kernel, the following vulnerability has been resolved:
mac80211: track only QoS data frames for admission control
For admission control, obviously all of that only works for
QoS data frames, otherwise we cannot even access the QoS
field in the header.
Syzbot reported (see below) an uninitialized value here due
to a status of a non-QoS nullfunc packet, which isn't even
long enough to contain the QoS header.
Fix this to only do anything for QoS data packets.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.15.15-1 (bookworm) | linux 5.15.15-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 02219b3abca59fca81711bfe7ee78df7abad97ce < 69f054d6642c8f6173724ce17e7ee3ff66b8f682 | 69f054d6642c8f6173724ce17e7ee3ff66b8f682 |
| linux | linux | >= 02219b3abca59fca81711bfe7ee78df7abad97ce < 46b9e29db2012a4d2a40a26101862e002ccf387b | 46b9e29db2012a4d2a40a26101862e002ccf387b |
| linux | linux | >= 02219b3abca59fca81711bfe7ee78df7abad97ce < eed897a22230e3231a740eddd7d6d95ba476625f | eed897a22230e3231a740eddd7d6d95ba476625f |
| linux | linux | >= 02219b3abca59fca81711bfe7ee78df7abad97ce < 42d08e97b196479f593499e887a9ab81446a34b9 | 42d08e97b196479f593499e887a9ab81446a34b9 |
| linux | linux | >= 02219b3abca59fca81711bfe7ee78df7abad97ce < d5e568c3a4ec2ddd23e7dc5ad5b0c64e4f22981a | d5e568c3a4ec2ddd23e7dc5ad5b0c64e4f22981a |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.92-1 | 5.10.92-1 |
| linux | linux_kernel | >= 0 < 5.15.15-1 | 5.15.15-1 |
| linux | linux_kernel | >= 0 < 5.15.15-1 | 5.15.15-1 |
| linux | linux_kernel | >= 0 < 5.15.15-1 | 5.15.15-1 |
| linux | linux_kernel | >= 0 < 4.4.0-267.301 | 4.4.0-267.301 |
| linux | linux_kernel | >= 3.19 < 4.19.222 | 4.19.222 |
| linux | linux_kernel | >= 4.20 < 5.4.168 | 5.4.168 |
| linux | linux_kernel | >= 5.11 < 5.15.11 | 5.15.11 |
| linux | linux_kernel | >= 5.5 < 5.10.88 | 5.10.88 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
vendor_ubuntu5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
linux-fips vulnerabilities
osv·2025-04-09·CVSS 5.5
[MEDIUM] linux-fips vulnerabilities
linux-fips vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Drivers core;
- HID subsystem;
- Network drivers;
- SCSI subsystem;
- SuperH / SH-Mobile drivers;
- File systems infrastructure;
- Ext4 file system;
- JFS file system;
- Network file system (NFS) client;
- Memory management;
- Network namespace;
- CAIF protocol;
- Networking core;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Network traffic control;
(CVE-2025-21702, CVE-2024-53227, CVE-2024-46826, CVE-2024-49952,
CVE-2024-56600, CVE-2021-47235, CVE-2024-50265, CVE-2021-47119,
CVE-2024-53165, CVE-2021-47483, CVE-2024-50302, CVE-2024-56595,
CVE-
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
osv·2025-04-09·CVSS 5.5
[MEDIUM] linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Drivers core;
- HID subsystem;
- Network drivers;
- SCSI subsystem;
- SuperH / SH-Mobile drivers;
- File systems infrastructure;
- Ext4 file system;
- JFS file system;
- Network file system (NFS) client;
- Memory management;
- Network namespace;
- CAIF protocol;
- Networking core;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Network traffic control;
(CVE-2025-21702, CVE-2024-53227, CVE-2024-46826, CVE-2024-49952,
CVE-2024-56600, CVE-2021-47235, CVE-2024-50265, CVE-2021-47119,
CVE-2024-53165, CVE-2021-47483, C
OSV
CVE-2021-47602: In the Linux kernel, the following vulnerability has been resolved: mac80211: track only QoS data frames for admission control For admission control,
osv·2024-06-19·CVSS 5.5
CVE-2021-47602 [MEDIUM] CVE-2021-47602: In the Linux kernel, the following vulnerability has been resolved: mac80211: track only QoS data frames for admission control For admission control,
In the Linux kernel, the following vulnerability has been resolved: mac80211: track only QoS data frames for admission control For admission control, obviously all of that only works for QoS data frames, otherwise we cannot even access the QoS field in the header. Syzbot reported (see below) an uninitialized value here due to a status of a non-QoS nullfunc packet, which isn't even long enough to contain the QoS header. Fix this to only do anything for QoS data packets.
GHSA
GHSA-g68j-9rxj-c36w: In the Linux kernel, the following vulnerability has been resolved:
mac80211: track only QoS data frames for admission control
For admission control
ghsa_unreviewed·2024-06-19
CVE-2021-47602 [MEDIUM] CWE-824 GHSA-g68j-9rxj-c36w: In the Linux kernel, the following vulnerability has been resolved:
mac80211: track only QoS data frames for admission control
For admission control
In the Linux kernel, the following vulnerability has been resolved:
mac80211: track only QoS data frames for admission control
For admission control, obviously all of that only works for
QoS data frames, otherwise we cannot even access the QoS
field in the header.
Syzbot reported (see below) an uninitialized value here due
to a status of a non-QoS nullfunc packet, which isn't even
long enough to contain the QoS header.
Fix this to only do anything for QoS data packets.
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2025-04-09·CVSS 5.5
CVE-2024-50302 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Drivers core;
- HID subsystem;
- Network drivers;
- SCSI subsystem;
- SuperH / SH-Mobile drivers;
- File systems infrastructure;
- Ext4 file system;
- JFS file system;
- Network file system (NFS) client;
- Memory management;
- Network namespace;
- CAIF protocol;
- Networking core;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Network traffic control;
(CVE-2025-21702, CVE-2024-53227, CVE-2024-46826, CVE-2024-49952,
CVE-2024-56600, CVE-2021-47235, CVE-2024-50265, CVE-2021-
Ubuntu
Linux kernel (FIPS) vulnerabilities
vendor_ubuntu·2025-04-09·CVSS 5.5
CVE-2024-50302 [MEDIUM] Linux kernel (FIPS) vulnerabilities
Title: Linux kernel (FIPS) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Drivers core;
- HID subsystem;
- Network drivers;
- SCSI subsystem;
- SuperH / SH-Mobile drivers;
- File systems infrastructure;
- Ext4 file system;
- JFS file system;
- Network file system (NFS) client;
- Memory management;
- Network namespace;
- CAIF protocol;
- Networking core;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Network traffic control;
(CVE-2025-21702, CVE-2024-53227, CVE-2024-46826, CVE-2024-49952,
CVE-2024-56600, CVE-2021-47235, CVE-2024-50265, CV
Red Hat
kernel: mac80211: track only QoS data frames for admission control
vendor_redhat·2024-06-19·CVSS 5.5
CVE-2021-47602 [MEDIUM] CWE-476 kernel: mac80211: track only QoS data frames for admission control
kernel: mac80211: track only QoS data frames for admission control
In the Linux kernel, the following vulnerability has been resolved:
mac80211: track only QoS data frames for admission control
For admission control, obviously all of that only works for
QoS data frames, otherwise we cannot even access the QoS
field in the header.
Syzbot reported (see below) an uninitialized value here due
to a status of a non-QoS nullfunc packet, which isn't even
long enough to contain the QoS header.
Fix this to only do anything for QoS data packets.
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 8) -
Debian
CVE-2021-47602: linux - In the Linux kernel, the following vulnerability has been resolved: mac80211: t...
vendor_debian·2021·CVSS 5.5
CVE-2021-47602 [MEDIUM] CVE-2021-47602: linux - In the Linux kernel, the following vulnerability has been resolved: mac80211: t...
In the Linux kernel, the following vulnerability has been resolved: mac80211: track only QoS data frames for admission control For admission control, obviously all of that only works for QoS data frames, otherwise we cannot even access the QoS field in the header. Syzbot reported (see below) an uninitialized value here due to a status of a non-QoS nullfunc packet, which isn't even long enough to contain the QoS header. Fix this to only do anything for QoS data packets.
Scope: local
bookworm: resolved (fixed in 5.15.15-1)
bullseye: resolved (fixed in 5.10.92-1)
forky: resolved (fixed in 5.15.15-1)
sid: resolved (fixed in 5.15.15-1)
trixie: resolved (fixed in 5.15.15-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/42d08e97b196479f593499e887a9ab81446a34b9https://git.kernel.org/stable/c/46b9e29db2012a4d2a40a26101862e002ccf387bhttps://git.kernel.org/stable/c/69f054d6642c8f6173724ce17e7ee3ff66b8f682https://git.kernel.org/stable/c/d5e568c3a4ec2ddd23e7dc5ad5b0c64e4f22981ahttps://git.kernel.org/stable/c/eed897a22230e3231a740eddd7d6d95ba476625fhttps://git.kernel.org/stable/c/42d08e97b196479f593499e887a9ab81446a34b9https://git.kernel.org/stable/c/46b9e29db2012a4d2a40a26101862e002ccf387bhttps://git.kernel.org/stable/c/69f054d6642c8f6173724ce17e7ee3ff66b8f682https://git.kernel.org/stable/c/d5e568c3a4ec2ddd23e7dc5ad5b0c64e4f22981ahttps://git.kernel.org/stable/c/eed897a22230e3231a740eddd7d6d95ba476625f
2024-06-19
Published