Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Govindarajulu Varadarajan

Researcher fromCisco
#32035of 53,633
7.8Total CVSS
Vulnerabilities · 1
PT-2024-10331
7.8
2024-02-28
Linux · Linux Kernel · CVE-2021-46998
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a use after free bug in the `enic hard start xmit` function. This function calls `enic queue wq skb()`, which may free the `skb` if an error occurs. However, the freed `skb` is still used in `skb tx timestamp(skb)`, potentially leading to a denial of service. The solution involves making `enic queue wq skb()` return an error and goto `spin unlock()` in case of an error. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.