In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix use-after-free in i40e_client_subtask()

Currently the call to i40e_client_del_instance frees the object
pf->cinst, however pf->cinst->lan_info is being accessed after
the free. Fix this by adding the missing return.

Addresses-Coverity: ("Read from pointer after free")

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00016.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
7b0b1a6d0ac983ce1928432285d0222d4fb7c38b affected
< c1322eaeb8af0d8985b5cc5fa759140fa0e57b84
7b0b1a6d0ac983ce1928432285d0222d4fb7c38b affected
< d718c15a2bf9ae082d5ae4d177fb19ef23cb4132
7b0b1a6d0ac983ce1928432285d0222d4fb7c38b affected
< 829a713450b8fb127cbabfc1244c1d8179ec5107
7b0b1a6d0ac983ce1928432285d0222d4fb7c38b affected
< 4ebc10aa7cd17fd9857dedac69600465c9dd16d1
7b0b1a6d0ac983ce1928432285d0222d4fb7c38b affected
< 1fd5d262e7442192ac7611ff1597a36c5b044323
7b0b1a6d0ac983ce1928432285d0222d4fb7c38b affected
< 38318f23a7ef86a8b1862e5e8078c4de121960c3
Linux Linux affected
Version Status Constraints
4.16 affected
—
0 unaffected
< 4.16
4.19.191 unaffected
≤ 4.19.*
5.4.120 unaffected
≤ 5.4.*
5.10.38 unaffected
≤ 5.10.*
5.11.22 unaffected
≤ 5.11.*
5.12.5 unaffected
≤ 5.12.*
5.13 unaffected
≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/1fd5d262e7442192ac7611ff1597a36c5b044323 cve-icon cve-icon
https://git.kernel.org/stable/c/38318f23a7ef86a8b1862e5e8078c4de121960c3 cve-icon cve-icon
https://git.kernel.org/stable/c/4ebc10aa7cd17fd9857dedac69600465c9dd16d1 cve-icon cve-icon
https://git.kernel.org/stable/c/829a713450b8fb127cbabfc1244c1d8179ec5107 cve-icon cve-icon
https://git.kernel.org/stable/c/c1322eaeb8af0d8985b5cc5fa759140fa0e57b84 cve-icon cve-icon
https://git.kernel.org/stable/c/d718c15a2bf9ae082d5ae4d177fb19ef23cb4132 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024022826-CVE-2021-46991-3c16@gregkh/T/#u cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2021-46991 cve-icon
https://www.cve.org/CVERecord?id=CVE-2021-46991 cve-icon
History

Fri, 06 Dec 2024 15:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'}

 cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Mon, 04 Nov 2024 13:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T07:01:52.574Z

Reserved: 2024-02-27T18:42:55.949Z

Link: CVE-2021-46991

cve-icon Vulnrichment

Updated: 2024-08-04T05:24:38.447Z

cve-icon NVD

Status : Analyzed

Published: 2024-02-28T09:15:37.787

Modified: 2024-12-06T15:27:56.500

Link: CVE-2021-46991

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-02-28T00:00:00Z

Links: CVE-2021-46991 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses