PT-2024-11302
CVE-2021-47301
·
Published
2021-07-01
·
Updated
2026-10-18
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a use-after-free error during reset in the igb driver. This occurs when the
next to watch descriptor is not properly cleaned while cleaning the TX ring, leading to invalid memory accesses. If igb poll() runs while the controller is reset, it can cause the driver to attempt to free a skb that was already freed. The crash is harder to reproduce with the igb driver, but the same potential problem exists as the code is identical to igc.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾