CVE-2021-46991

i40e: Fix use-after-free in i40e_client_subtask()

State: Published
Severity: Not scored
Published: Feb 28, 2024
Updated: May 11, 2026
Reserved: Feb 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix use-after-free in i40e_client_subtask()

Currently the call to i40e_client_del_instance frees the object pf->cinst, however pf->cinst->lan_info is being accessed after the free. Fix this by adding the missing return.

Addresses-Coverity: ("Read from pointer after free")

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7b0b1a6d0ac983ce1928432285d0222d4fb7c38b to before c1322eaeb8af0d8985b5cc5fa759140fa0e57b84Affected 7b0b1a6d0ac983ce1928432285d0222d4fb7c38b to before d718c15a2bf9ae082d5ae4d177fb19ef23cb4132Affected 7b0b1a6d0ac983ce1928432285d0222d4fb7c38b to before 829a713450b8fb127cbabfc1244c1d8179ec5107Affected 7b0b1a6d0ac983ce1928432285d0222d4fb7c38b to before 4ebc10aa7cd17fd9857dedac69600465c9dd16d1Affected 7b0b1a6d0ac983ce1928432285d0222d4fb7c38b to before 1fd5d262e7442192ac7611ff1597a36c5b044323Affected 7b0b1a6d0ac983ce1928432285d0222d4fb7c38b to before 38318f23a7ef86a8b1862e5e8078c4de121960c3Affected
LinuxLinux	4.16Affected before 4.16Not affected 4.19.191 through 4.19.Not affected 5.4.120 through 5.4.Not affected 5.10.38 through 5.10.Not affected 5.11.22 through 5.11.Not affected 5.12.5 through 5.12.*Not affected 5.13 and laterNot affected

Product

Versions

LinuxLinux

7b0b1a6d0ac983ce1928432285d0222d4fb7c38b to before c1322eaeb8af0d8985b5cc5fa759140fa0e57b84Affected
7b0b1a6d0ac983ce1928432285d0222d4fb7c38b to before d718c15a2bf9ae082d5ae4d177fb19ef23cb4132Affected
7b0b1a6d0ac983ce1928432285d0222d4fb7c38b to before 829a713450b8fb127cbabfc1244c1d8179ec5107Affected
7b0b1a6d0ac983ce1928432285d0222d4fb7c38b to before 4ebc10aa7cd17fd9857dedac69600465c9dd16d1Affected
7b0b1a6d0ac983ce1928432285d0222d4fb7c38b to before 1fd5d262e7442192ac7611ff1597a36c5b044323Affected
7b0b1a6d0ac983ce1928432285d0222d4fb7c38b to before 38318f23a7ef86a8b1862e5e8078c4de121960c3Affected

LinuxLinux

4.16Affected
before 4.16Not affected
4.19.191 through 4.19.*Not affected
5.4.120 through 5.4.*Not affected
5.10.38 through 5.10.*Not affected
5.11.22 through 5.11.*Not affected
5.12.5 through 5.12.*Not affected
5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.