PT-2021-8035 · Linux+4 · Linux Kernel+4

Published 2021-11-15 · Updated 2024-08-20 · CVE-2021-47194

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the cfg80211 function in the Linux kernel, where switching from P2P GO type to ADHOC type via send msg(NL80211 CMD SET INTERFACE) does not call the cleanup function cfg80211 stop ap(), leading to the initialization of in-use data. This can cause the linked list to become corrupt. For example, the path re-initializes the sdata->assigned chanctx list while it is still an element of the assigned vifs list.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

BDU:2024-03691

CVE-2021-47194

OESA-2024-1526

OESA-2024-1535

OPENSUSE-SU-2024_1641-1

OPENSUSE-SU-2024_1642-1

OPENSUSE-SU-2024_1644-1

OPENSUSE-SU-2024_1659-1

OPENSUSE-SU-2024_1663-1

SUSE-SU-2024:1641-1

SUSE-SU-2024:1642-1

SUSE-SU-2024:1644-1

SUSE-SU-2024:1645-1

SUSE-SU-2024:1647-1

SUSE-SU-2024:1650-1

SUSE-SU-2024:1659-1

SUSE-SU-2024:1663-1

SUSE-SU-2024:2892-1

SUSE-SU-2024:2901-1

SUSE-SU-2024:2940-1

SUSE-SU-2024_2892-1

USN-6938-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

Ubuntu

References · 1016

• 🔥 https://github.com/MaherAzzouzi/CVE-2024-26817-amdkfd · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47183 · Security Note
• https://ubuntu.com/security/CVE-2024-26886 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26882 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://git.kernel.org/stable/c/563fbefed46ae4c1f70cffb8eb54c02df480b2c2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47210 · Security Note
• https://git.kernel.org/stable/c/5a9b671c8d74a3e1b999e7a0c7f366079bcc93dd · Patch
• https://git.kernel.org/stable/c/b8a045e2a9b234cfbc06cf36923886164358ddec · Patch
• https://ubuntu.com/security/CVE-2024-26884 · Vendor Advisory
• https://git.kernel.org/stable/c/0738cdb636c21ab552eaecf905efa4a6070e3ebc · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47100 · Security Note
• https://ubuntu.com/security/CVE-2024-24857 · Vendor Advisory
• https://git.kernel.org/stable/c/8f06bb8c216bcd172394f61e557727e691b4cb24 · Patch
• https://ubuntu.com/security/notices/USN-6938-1 · Vendor Advisory