CVE-2021-47301

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

igb: Fix use-after-free error during reset

Cleans the next descriptor to watch (next_to_watch) when cleaning the TX ring.

Failure to do so can cause invalid memory accesses. If igb_poll() runs while the controller is reset this can lead to the driver try to free a skb that was already freed.

(The crash is harder to reproduce with the igb driver, but the same potential problem exists as the code is identical to igc)

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0, < d7367f781e5a9ca5df9082b15b272b55e76931f8; >= 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0, < d3ccb18ed5ac3283c7b31ecc685b499e580d5492; >= 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0, < 88e0720133d42d34851c8721cf5f289a50a8710f; >= 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0, < f153664d8e70c11d0371341613651e1130e20240; >= 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0, < 8e24c12f2ff6d32fd9f057382f08e748ec97194c; >= 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0, < 7b292608db23ccbbfbfa50cdb155d01725d7a52e
LinuxLinux4.12

References

Timeline

Published
May 21, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-473027.8In the Linux kernel, the following vulnerability has been resolved: igc: Fix use-after-free error during reset Cleans the next descriptor CVE-2021-473037.8In the Linux kernel, the following vulnerability has been resolved: bpf: Track subprog poke descriptors correctly and fix use-after-free SCVE-2021-473045.5In the Linux kernel, the following vulnerability has been resolved: tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized This comCVE-2021-473055.5In the Linux kernel, the following vulnerability has been resolved: dma-buf/sync_file: Don't leak fences on merge failure Each add_fence()CVE-2021-473067.8In the Linux kernel, the following vulnerability has been resolved: net: fddi: fix UAF in fza_probe fp is netdev private data and it cannoCVE-2021-473075.5In the Linux kernel, the following vulnerability has been resolved: cifs: prevent NULL deref in cifs_compose_mount_options() The optional CVE-2021-473088.8In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception Fix array index ouCVE-2021-473097.1In the Linux kernel, the following vulnerability has been resolved: net: validate lwtstate->data before returning from skb_tunnel_info() sCVE-2021-473107.8In the Linux kernel, the following vulnerability has been resolved: net: ti: fix UAF in tlan_remove_one priv is netdev private data and itCVE-2021-473117.8In the Linux kernel, the following vulnerability has been resolved: net: qcom/emac: fix UAF in emac_remove adpt is netdev private data andCVE-2021-473125.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix dereference of null pointer flow In the caseCVE-2021-473138.4In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init It's a c
CVE-2021-47301: High severity, CVSS 7.8 | Vulnix