Lucene search

K
cveLinuxCVE-2021-47301
HistoryMay 21, 2024 - 3:15 p.m.

CVE-2021-47301

2024-05-2115:15:17
Linux
web.nvd.nist.gov
35
cve-2021-47301
igb driver
linux kernel
use-after-free
memory access

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

10.3%

In the Linux kernel, the following vulnerability has been resolved:

igb: Fix use-after-free error during reset

Cleans the next descriptor to watch (next_to_watch) when cleaning the
TX ring.

Failure to do so can cause invalid memory accesses. If igb_poll() runs
while the controller is reset this can lead to the driver try to free
a skb that was already freed.

(The crash is harder to reproduce with the igb driver, but the same
potential problem exists as the code is identical to igc)

Affected configurations

Vulners
Node
linuxlinux_kernelRange4.124.14.241
OR
linuxlinux_kernelRange4.15.04.19.199
OR
linuxlinux_kernelRange4.20.05.4.136
OR
linuxlinux_kernelRange5.5.05.10.54
OR
linuxlinux_kernelRange5.11.05.13.6
OR
linuxlinux_kernelRange5.14.0
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/intel/igb/igb_main.c"
    ],
    "versions": [
      {
        "version": "7cc6fd4c60f2",
        "lessThan": "d7367f781e5a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "7cc6fd4c60f2",
        "lessThan": "d3ccb18ed5ac",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "7cc6fd4c60f2",
        "lessThan": "88e0720133d4",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "7cc6fd4c60f2",
        "lessThan": "f153664d8e70",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "7cc6fd4c60f2",
        "lessThan": "8e24c12f2ff6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "7cc6fd4c60f2",
        "lessThan": "7b292608db23",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/intel/igb/igb_main.c"
    ],
    "versions": [
      {
        "version": "4.12",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.12",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "4.14.241",
        "lessThanOrEqual": "4.14.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "4.19.199",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.4.136",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.10.54",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.13.6",
        "lessThanOrEqual": "5.13.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.14",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

10.3%