What is CVE-2021-47596?

CVE-2021-47596 is a high-severity vulnerability in Linux, classified under Use After Free. CVSS score: 7.8/10. Published 2024-06-19.

How severe is CVE-2021-47596?

High severity. CVSS v3 base score is 7.8 out of 10.

Use After Free in Linux

CVE-2021-47596

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg Currently, the hns3_remove function firstly uninstall client instance, and then uninstall acceletion engine device. The netdevice is freed in client instance uninstall process, but acceletion engine device uninstall process still use it to trace runtime information. This causes a use after free problem. So fixes it by check the instance register state to avoid use after free.

Vulnerability class: Use-After-Free

EPSS: 0.002 (16.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux — versions d8355240cf8fb8b9e002b5c8458578435cea85c2, 5.8, 0
Linux Linux_kernel

Weakness classification (CWE)

CWE-416 — Use After Free

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2021-47596?: CVE-2021-47596 is a high-severity vulnerability in Linux, classified under Use After Free. CVSS score: 7.8/10. Published 2024-06-19.
How severe is CVE-2021-47596?: High severity. CVSS v3 base score is 7.8 out of 10.