CVE-2021-43976

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.15.2

Description The issue is related to the mwifiex usb recv function in the Linux kernel, specifically in the drivers/net/wireless/marvell/mwifiex/usb.c file. This function allows an attacker, who can connect a crafted USB device, to cause a denial of service (skb over panic). The vulnerability is associated with resource release errors.

Recommendations For Linux kernel versions through 5.15.2, consider disabling the mwifiex usb recv function as a temporary workaround until a patch is available. Restrict access to the drivers/net/wireless/marvell/mwifiex/usb.c file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.