CVE-2021-47479

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in the rtl8712 dl fw() function. The problem occurs due to a race condition between r871xu dev remove() and ->ndo open() callback, where the driver accesses released firmware in the ->ndo open() callback. This happens because the driver releases firmware before unregistering the netdev. The fix involves moving unregister netdev() before cleaning up resources.

Technical details about exploitation include:

The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.