CVE-2021-47017: ath10k: Fix a use after free in ath10k_htc_send_bundle
In the Linux kernel, the following vulnerability has been resolved:
ath10k: Fix a use after free in ath10khtcsendbundle
In ath10khtcsendbundle, the bundleskb could be freed by devkfreeskbany(bundleskb). But the bundleskb is used later by bundleskb->len.
As skblen = bundleskb->len, my patch replaces bundleskb->len to skblen after the bundleskb was freed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47017?
CVE-2021-47017 is categorized with a high severity due to the potential for a use after free vulnerability that could lead to arbitrary code execution.
How do I fix CVE-2021-47017?
To fix CVE-2021-47017, users should update their Linux kernel to versions 5.10.37 or later, or 5.11.21 or later, or 5.12.4 or later.
What versions of the Linux kernel are affected by CVE-2021-47017?
CVE-2021-47017 affects Linux kernel versions between 5.8 to 5.10.37, 5.11 to 5.11.21, and 5.12 to 5.12.4.
What could happen if CVE-2021-47017 is exploited?
Exploitation of CVE-2021-47017 could allow an attacker to execute arbitrary code on the affected system, potentially leading to system compromise.
Who is impacted by CVE-2021-47017?
Users running vulnerable versions of the Linux kernel, particularly those using wireless drivers related to ath10k, are impacted by CVE-2021-47017.