Lucene search

416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2021-46991

HistoryFeb 28, 2024 - 9:15 a.m.

CVE-2021-46991

2024-02-2809:15:37

416baaa9-dc9f-4396-8d5f-8c081fb06d67

web.nvd.nist.gov

vulnerability

resolved

linux kernel

i40e

use-after-free

object

fix

return

coverity

pointer

free

cve-2021-46991

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.3%

JSON

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix use-after-free in i40e_client_subtask()

Currently the call to i40e_client_del_instance frees the object
pf->cinst, however pf->cinst->lan_info is being accessed after
the free. Fix this by adding the missing return.

Addresses-Coverity: (“Read from pointer after free”)

References

git.kernel.org/stable/c/1fd5d262e7442192ac7611ff1597a36c5b044323

git.kernel.org/stable/c/38318f23a7ef86a8b1862e5e8078c4de121960c3

git.kernel.org/stable/c/4ebc10aa7cd17fd9857dedac69600465c9dd16d1

git.kernel.org/stable/c/829a713450b8fb127cbabfc1244c1d8179ec5107

git.kernel.org/stable/c/c1322eaeb8af0d8985b5cc5fa759140fa0e57b84

git.kernel.org/stable/c/d718c15a2bf9ae082d5ae4d177fb19ef23cb4132