CVE-2021-47311: net: qcom/emac: fix UAF in emac_remove
In the Linux kernel, the following vulnerability has been resolved:
net: qcom/emac: fix UAF in emacremove
adpt is netdev private data and it cannot be used after freenetdev() call. Using adpt after freenetdev() can cause UAF bug. Fix it by moving freenetdev() at the end of the function.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
net: qcom/emac: fix UAF in emacremove
The Linux kernel CVE team has assigned CVE-2021-47311 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024052129-CVE-2021-47311-47f4@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47311?
CVE-2021-47311 is rated as a high severity vulnerability in the Linux kernel.
How do I fix CVE-2021-47311?
To resolve CVE-2021-47311, upgrade to the patched versions of the kernel: 4.9.277, 4.14.241, 4.19.199, 5.4.135, 5.10.53, 5.13.5, or 5.14.
Which versions of the Linux kernel are affected by CVE-2021-47311?
CVE-2021-47311 affects multiple Linux kernel versions prior to the patched releases mentioned.
What kind of bug is associated with CVE-2021-47311?
CVE-2021-47311 is associated with a use-after-free (UAF) bug in the Linux kernel.
Is CVE-2021-47311 exploited in the wild?
As of the latest updates, there is no public indication that CVE-2021-47311 is actively exploited in the wild.