CVE-2021-46973: net: qrtr: Avoid potential use after free in MHI send
In the Linux kernel, the following vulnerability has been resolved:
net: qrtr: Avoid potential use after free in MHI send
It is possible that the MHI ulcallback will be invoked immediately following the queueing of the skb for transmission, leading to the callback decrementing the refcount of the associated sk and freeing the skb.
As such the dereference of skb and the increment of the sk refcount must happen before the skb is queued, to avoid the skb to be used after free and potentially the sk to drop its last refcount..
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-46973?
CVE-2021-46973 has been classified as a moderate severity vulnerability affecting the Linux kernel.
How do I fix CVE-2021-46973?
To fix CVE-2021-46973, you should upgrade your Linux kernel to a version that is not vulnerable, specifically above 5.12.2.
Which versions of the Linux kernel are affected by CVE-2021-46973?
CVE-2021-46973 affects Linux kernel versions between 5.8 and 5.12.2, as well as specific versions from 5.10.35 to 5.11.19.
What type of vulnerability is CVE-2021-46973?
CVE-2021-46973 is a use-after-free vulnerability which may lead to potential memory corruption in the Linux kernel.
Can CVE-2021-46973 be exploited remotely?
CVE-2021-46973 may be exploited remotely if an attacker can manipulate the affected functionality in the kernel.