PT-2024-11312 · Linux+6 · Linux Kernel+6

Pavel Skripkin · Published 2021-07-09 · Updated 2024-12-26 · CVE-2021-47311

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free (UAF) bug in the emac remove function. The adpt variable, which is netdev private data, cannot be used after the free netdev() call. Using adpt after free netdev() can cause a UAF bug. The fix involves moving the free netdev() call to the end of the function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2024:4211

ALSA-2024:4352

BDU:2025-07324

CESA-2024_4211

CESA-2024_4352

CVE-2021-47311

INFSA-2024_4211

INFSA-2024_4352

OESA-2024-1862

OPENSUSE-SU-2024_2362-1

RHSA-2024:4211

RHSA-2024:4352

RHSA-2024:4740

RHSA-2024:5281

RHSA-2024_4211

RHSA-2024_4352

RLSA-2024:4211

RLSA-2024:4352

RXSA-2024:4211

SUSE-SU-2024:1979-1

SUSE-SU-2024:1983-1

SUSE-SU-2024:2184-1

SUSE-SU-2024:2362-1

SUSE-SU-2024:2365-1

SUSE-SU-2024:2384-1

Affected Products

Almalinux

Astra Linux

Centos

Linux Kernel

Red Hat

Rocky Linux

Suse

References · 822

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2024:1983-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47311 · Vendor Advisory
• https://git.kernel.org/stable/c/b1e091331920f8fbfc747dcbd16263fcd71abb2d · Patch
• https://osv.dev/vulnerability/CVE-2021-47311 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39480 · Security Note
• https://git.kernel.org/stable/c/2b70ca92847c619d6264c7372ef74fcbfd1e048c · Patch
• https://git.kernel.org/stable/c/11e9d163d631198bb3eb41a677a61b499516c0f7 · Patch
• https://git.kernel.org/stable/c/b560521eca03d0a2db6093a5a632cbdd0a0cf833 · Patch
• https://errata.rockylinux.org/RLSA-2024:4352 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2384-1 · Vendor Advisory
• https://git.kernel.org/stable/c/4d04a42b926e682140776e54188f4a44f1f01a81 · Patch
• https://git.kernel.org/stable/c/ad297cd2db8953e2202970e9504cab247b6c7cb4 · Patch
• https://git.kernel.org/stable/c/8a225a6e07a57a1538d53637cb3d82bd3e477839 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-38558 · Security Note