Wind River Support Network

HomeDefectsLIN1019-11180

Not to be fixed

LIN1019-11180 : Security Advisory - linux - CVE-2021-46998

Created: Feb 28, 2024 Updated: Mar 22, 2024

Resolved Date: Mar 22, 2024

Found In Version: 10.19.45.1

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

ethernet:enic: Fix a use after free bug in enic_hard_start_xmit

In enic_hard_start_xmit, it calls enic_queue_wq_skb(). Inside
enic_queue_wq_skb, if some error happens, the skb will be freed
by dev_kfree_skb(skb). But the freed skb is still used in
skb_tx_timestamp(skb).

My patch makes enic_queue_wq_skb() return error and goto spin_unlock()
incase of error. The solution is provided by Govind.
See https://lkml.org/lkml/2021/4/30/961.

CREATE(Triage):(User=admin) CVE-2021-46998 (https://nvd.nist.gov/vuln/detail/CVE-2021-46998)