CVE-2021-47602

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mac80211: track only QoS data frames for admission control

For admission control, obviously all of that only works for QoS data frames, otherwise we cannot even access the QoS field in the header.

Syzbot reported (see below) an uninitialized value here due to a status of a non-QoS nullfunc packet, which isn't even long enough to contain the QoS header.

Fix this to only do anything for QoS data packets.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-824

Affected software

No affected versions have been published.

Timeline

Published
Jun 19, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-476034.4In the Linux kernel, the following vulnerability has been resolved: audit: improve robustness of the audit queue handling If the audit daeCVE-2021-476047.1In the Linux kernel, the following vulnerability has been resolved: vduse: check that offset is within bounds in get_config() This conditiCVE-2021-476057.8In the Linux kernel, the following vulnerability has been resolved: vduse: fix memory corruption in vduse_dev_ioctl() The "config.offset" CVE-2021-476065.5In the Linux kernel, the following vulnerability has been resolved: net: netlink: af_netlink: Prevent empty skb by adding a check on len. CVE-2021-476075.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg The impCVE-2021-476085.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix kernel address leakage in atomic fetch The change in commit 3CVE-2021-476097.8In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Fix string overflow in SCPI genpd driver Without tCVE-2021-476105.5In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix null ptr access msm_ioctl_gem_submit() Fix the below nullCVE-2021-476115.5In the Linux kernel, the following vulnerability has been resolved: mac80211: validate extended element ID is present Before attempting toCVE-2021-476125.5In the Linux kernel, the following vulnerability has been resolved: nfc: fix segfault in nfc_genl_dump_devices_done When kmalloc in nfc_geCVE-2021-476137.8In the Linux kernel, the following vulnerability has been resolved: i2c: virtio: fix completion handling The driver currently assumes thatCVE-2021-476147.8In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix a user-after-free in add_pble_prm When irdma_hmc_sd_on
CVE-2021-47602: Medium severity, CVSS 5.5 | Vulnix