CVE-2021-46991

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in the i40e client subtask() function. This vulnerability occurs because the object pf->cinst is freed by the call to i40e client del instance, but pf->cinst->lan info is still being accessed after the free. The fix involves adding a missing return to prevent this access. The vulnerability may allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.