Wind River Support Network

HomeDefectsLIN1021-7479
Not to be fixed

LIN1021-7479 : Security Advisory - linux - CVE-2021-46991

Created: Feb 28, 2024    Updated: Mar 22, 2024
Resolved Date: Mar 22, 2024
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix use-after-free in i40e_client_subtask()

Currently the call to i40e_client_del_instance frees the object
pf->cinst, however pf->cinst->lan_info is being accessed after
the free. Fix this by adding the missing return.

Addresses-Coverity: ("Read from pointer after free")

CREATE(Triage):(User=admin) CVE-2021-46991 (https://nvd.nist.gov/vuln/detail/CVE-2021-46991)
Live chat
Online