PT-2024-11302

CVE-2021-47301

·

Published

2021-07-01

·

Updated

2026-10-18

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a use-after-free error during reset in the igb driver. This occurs when the next to watch descriptor is not properly cleaned while cleaning the TX ring, leading to invalid memory accesses. If igb poll() runs while the controller is reset, it can cause the driver to attempt to free a skb that was already freed. The crash is harder to reproduce with the igb driver, but the same potential problem exists as the code is identical to igc.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
CESA-2022_1988
CLSA-2025-1742469561
CLSA-2025-1742471200
CLSA-2026-1780132159
OESA-2024-1736
OPENSUSE-SU-2024_2185-1
RHSA-2022:1988
RHSA-2022_1988
SUSE-SU-2024:1979-1
SUSE-SU-2024:1983-1
SUSE-SU-2024:2010-1
SUSE-SU-2024:2183-1
SUSE-SU-2024:2184-1
SUSE-SU-2024:2185-1
Found an issue in the description? Have something to add? Feel free to write us 👾