CVE-2021-47611

mac80211: validate extended element ID is present

State: Published
Severity: 8.1 High
Published: Jun 19, 2024
Updated: Aug 5, 2026
Reserved: Jun 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

mac80211: validate extended element ID is present

Before attempting to parse an extended element, verify that the extended element ID is present.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	41cbb0f5a29592874355e4159489eb08337cd50e to before 03029bb044ccee60adbc93e70713f3ae58abc3a1Affected 41cbb0f5a29592874355e4159489eb08337cd50e to before a19cf6844b509d44ecbd536f33d314d91ecdd2b5Affected 41cbb0f5a29592874355e4159489eb08337cd50e to before 7fd214fc7f2ee3a89f91e717e3cfad55f5a27045Affected 41cbb0f5a29592874355e4159489eb08337cd50e to before c62b16f98688ae7bc0ab23a6490481f4ce9b3a49Affected 41cbb0f5a29592874355e4159489eb08337cd50e to before 768c0b19b50665e337c96858aa2b7928d6dcf756Affected
LinuxLinux	4.19Affected before 4.19Not affected 4.19.222 through 4.19.Not affected 5.4.168 through 5.4.Not affected 5.10.88 through 5.10.Not affected 5.15.11 through 5.15.Not affected 5.16 and laterNot affected

Product

Versions

LinuxLinux

41cbb0f5a29592874355e4159489eb08337cd50e to before 03029bb044ccee60adbc93e70713f3ae58abc3a1Affected
41cbb0f5a29592874355e4159489eb08337cd50e to before a19cf6844b509d44ecbd536f33d314d91ecdd2b5Affected
41cbb0f5a29592874355e4159489eb08337cd50e to before 7fd214fc7f2ee3a89f91e717e3cfad55f5a27045Affected
41cbb0f5a29592874355e4159489eb08337cd50e to before c62b16f98688ae7bc0ab23a6490481f4ce9b3a49Affected
41cbb0f5a29592874355e4159489eb08337cd50e to before 768c0b19b50665e337c96858aa2b7928d6dcf756Affected

LinuxLinux

4.19Affected
before 4.19Not affected
4.19.222 through 4.19.*Not affected
5.4.168 through 5.4.*Not affected
5.10.88 through 5.10.*Not affected
5.15.11 through 5.15.*Not affected
5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.