CVE-2021-47311

net: qcom/emac: fix UAF in emac_remove

HIGH

7.8

CVSS Score

Published: May 21, 2024 at 02:35 PM UTC

Updated: June 17, 2026 at 04:17 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: net: qcom/emac: fix UAF in emac_remove adpt is netdev private data and it cannot be used after free_netdev() call. Using adpt after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.10 ≤ v < 4.14.2414.15 ≤ v < 4.19.1994.20 ≤ v < 5.4.1354.9 ≤ v < 4.14.2414.9 ≤ v < 4.19.1994.9 ≤ v < 4.9.2774.9 ≤ v < 5.10.534.9 ≤ v < 5.13.54.9 ≤ v < 5.144.9 ≤ v < 5.4.1355.11 ≤ v < 5.13.55.5 ≤ v < 5.10.535.14 rc154e19bc74f3380d414681762ceed9f7245bc6a6e

Vendor states this is fixed in 11e9d163d631198bb3eb41a677a61b499516c0f7 (fixed)

Vendor states this is fixed in 2b70ca92847c619d6264c7372ef74fcbfd1e048c (fixed)

Vendor states this is fixed in 4d04a42b926e682140776e54188f4a44f1f01a81 (fixed)

Vendor states this is fixed in 8a225a6e07a57a1538d53637cb3d82bd3e477839 (fixed)

Vendor states this is fixed in ad297cd2db8953e2202970e9504cab247b6c7cb4 (fixed)

Vendor states this is fixed in b1e091331920f8fbfc747dcbd16263fcd71abb2d (fixed)

Vendor states this is fixed in b560521eca03d0a2db6093a5a632cbdd0a0cf833 (fixed)

Vendor states this is fixed in 4.14.241 (unaffected)

Vendor states this is fixed in 4.19.199 (unaffected)

Vendor states this is fixed in 4.9 (unaffected)

Vendor states this is fixed in 4.9.277 (unaffected)

Vendor states this is fixed in 5.10.53 (unaffected)