CVE-2021-46973CWE-416

CVE-2021-46973

High · published February 28, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
13.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: qrtr: Avoid potential use after free in MHI send

It is possible that the MHI ul_callback will be invoked immediately

following the queueing of the skb for transmission, leading to the

callback decrementing the refcount of the associated sk and freeing the

skb.

As such the dereference of skb and the increment of the sk refcount must

happen before the skb is queued, to avoid the skb to be used after free

and potentially the sk to drop its last refcount..

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00231 · 13.2th percentile
Weakness
CWE-416 · Use After Free
Published
2024-02-28T00:04Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 5.8, ≤ 5.10.35—
linux/linux_kernel≥ 5.11, ≤ 5.11.19—
linux/linux_kernel≥ 5.12, ≤ 5.12.2—
References (8)
EPSS history
Timeline
  • 27 FEB 18:47Z
    net: qrtr: Avoid potential use after free in MHI send
    cvelistv5