CVE-2021-47017

ath10k: Fix a use after free in ath10k_htc_send_bundle

State: Published
Severity: 8.8 High
Published: Feb 28, 2024
Updated: Aug 5, 2026
Reserved: Feb 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ath10k: Fix a use after free in ath10k_htc_send_bundle

In ath10k_htc_send_bundle, the bundle_skb could be freed by dev_kfree_skb_any(bundle_skb). But the bundle_skb is used later by bundle_skb->len.

As skb_len = bundle_skb->len, my patch replaces bundle_skb->len to skb_len after the bundle_skb was freed.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c8334512f3dd1b94844baca629f9bedca4271593 to before 8bb054fb336f4250002fff4e0b075221c05c3c65Affected c8334512f3dd1b94844baca629f9bedca4271593 to before 3b1ac40c6012140828caa79e592a438a18ebf71bAffected c8334512f3dd1b94844baca629f9bedca4271593 to before 5e413c0831ff4700d1739db3fa3ae9f859744676Affected c8334512f3dd1b94844baca629f9bedca4271593 to before 8392df5d7e0b6a7d21440da1fc259f9938f4dec3Affected
LinuxLinux	5.8Affected before 5.8Not affected 5.10.37 through 5.10.Not affected 5.11.21 through 5.11.Not affected 5.12.4 through 5.12.*Not affected 5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.