Riskcovery

CVE-2021-47301

igb: Fix use-after-free error during reset

State
Published
Severity
Not scored
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

igb: Fix use-after-free error during reset

Cleans the next descriptor to watch (next_to_watch) when cleaning the TX ring.

Failure to do so can cause invalid memory accesses. If igb_poll() runs while the controller is reset this can lead to the driver try to free a skb that was already freed.

(The crash is harder to reproduce with the igb driver, but the same potential problem exists as the code is identical to igc)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0 to before d7367f781e5a9ca5df9082b15b272b55e76931f8Affected
  • 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0 to before d3ccb18ed5ac3283c7b31ecc685b499e580d5492Affected
  • 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0 to before 88e0720133d42d34851c8721cf5f289a50a8710fAffected
  • 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0 to before f153664d8e70c11d0371341613651e1130e20240Affected
  • 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0 to before 8e24c12f2ff6d32fd9f057382f08e748ec97194cAffected
  • 7cc6fd4c60f267e17b0baef1580d7a6258c0a6f0 to before 7b292608db23ccbbfbfa50cdb155d01725d7a52eAffected
LinuxLinux
  • 4.12Affected
  • before 4.12Not affected
  • 4.14.241 through 4.14.*Not affected
  • 4.19.199 through 4.19.*Not affected
  • 5.4.136 through 5.4.*Not affected
  • 5.10.54 through 5.10.*Not affected
  • 5.13.6 through 5.13.*Not affected
  • 5.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.