CVE-2021-47194

Published Apr 10, 2024

Last updated 7 months ago

CVSS high 7.8

Overview

Description: In the Linux kernel, the following vulnerability has been resolved: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type If the userspace tools switch from NL80211_IFTYPE_P2P_GO to NL80211_IFTYPE_ADHOC via send_msg(NL80211_CMD_SET_INTERFACE), it does not call the cleanup cfg80211_stop_ap(), this leads to the initialization of in-use data. For example, this path re-init the sdata->assigned_chanctx_list while it is still an element of assigned_vifs list, and makes that linked list corrupt.
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

nvd@nist.gov: CWE-665

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "21B46662-20A7-48E8-8AF8-09267C266861",
            "versionEndExcluding": "4.4.293",
            "versionStartIncluding": "3.6.0"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BF25A497-0F2C-4E9F-8191-4357CE1DF4D7",
            "versionEndExcluding": "4.9.291",
            "versionStartIncluding": "4.5.0"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B54B87EE-9269-470B-B916-37CFE44AA2DD",
            "versionEndExcluding": "4.14.256",
            "versionStartIncluding": "4.10.0"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "508DCDC1-955F-4ED4-ADE7-4DB7F1D89D96",
            "versionEndExcluding": "4.19.218",
            "versionStartIncluding": "4.15.0"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8D5C9B4E-0BD6-427E-AD7E-825F5E977B56",
            "versionEndExcluding": "5.4.162",
            "versionStartIncluding": "4.20.0"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E93DC61F-3F49-4D65-B0DE-4B46B8990120",
            "versionEndExcluding": "5.10.82",
            "versionStartIncluding": "5.5.0"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4A3325B8-6321-4BCE-A6B2-BD2AFF47E127",
            "versionEndExcluding": "5.15.5",
            "versionStartIncluding": "5.11.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 3.1

Weaknesses

Social media

Configurations

References