In the Linux kernel, the following vulnerability has been resolved:

ethernet:enic: Fix a use after free bug in enic_hard_start_xmit

In enic_hard_start_xmit, it calls enic_queue_wq_skb(). Inside
enic_queue_wq_skb, if some error happens, the skb will be freed
by dev_kfree_skb(skb). But the freed skb is still used in
skb_tx_timestamp(skb).

My patch makes enic_queue_wq_skb() return error and goto spin_unlock()
incase of error. The solution is provided by Govind.
See https://lkml.org/lkml/2021/4/30/961.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00016.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
fb7516d42478ebc8e2f00efb76ef96f7b68fd8d3 affected
< 25a87b1f566b5eb2af2857a928f0e2310d900976
fb7516d42478ebc8e2f00efb76ef96f7b68fd8d3 affected
< f7f6f07774091a6ddd98500b85386c3c6afb30d3
fb7516d42478ebc8e2f00efb76ef96f7b68fd8d3 affected
< 7afdd6aba95c8a526038e7abe283eeac3e4320f1
fb7516d42478ebc8e2f00efb76ef96f7b68fd8d3 affected
< 6892396ebf04ea2c021d80e10f4075e014cd7cc3
fb7516d42478ebc8e2f00efb76ef96f7b68fd8d3 affected
< d90529392aaf498dafa95d212295d64b2cea4e24
fb7516d42478ebc8e2f00efb76ef96f7b68fd8d3 affected
< 643001b47adc844ae33510c4bb93c236667008a3
Linux Linux affected
Version Status Constraints
4.16 affected
—
0 unaffected
< 4.16
4.19.191 unaffected
≤ 4.19.*
5.4.120 unaffected
≤ 5.4.*
5.10.38 unaffected
≤ 5.10.*
5.11.22 unaffected
≤ 5.11.*
5.12.5 unaffected
≤ 5.12.*
5.13 unaffected
≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/25a87b1f566b5eb2af2857a928f0e2310d900976 cve-icon cve-icon
https://git.kernel.org/stable/c/643001b47adc844ae33510c4bb93c236667008a3 cve-icon cve-icon
https://git.kernel.org/stable/c/6892396ebf04ea2c021d80e10f4075e014cd7cc3 cve-icon cve-icon
https://git.kernel.org/stable/c/7afdd6aba95c8a526038e7abe283eeac3e4320f1 cve-icon cve-icon
https://git.kernel.org/stable/c/d90529392aaf498dafa95d212295d64b2cea4e24 cve-icon cve-icon
https://git.kernel.org/stable/c/f7f6f07774091a6ddd98500b85386c3c6afb30d3 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024022827-CVE-2021-46998-eda2@gregkh/T/#u cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2021-46998 cve-icon
https://www.cve.org/CVERecord?id=CVE-2021-46998 cve-icon
History

Fri, 06 Dec 2024 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Mon, 04 Nov 2024 13:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T07:02:00.757Z

Reserved: 2024-02-27T18:42:55.950Z

Link: CVE-2021-46998

cve-icon Vulnrichment

Updated: 2024-08-04T05:24:38.462Z

cve-icon NVD

Status : Analyzed

Published: 2024-02-28T09:15:38.090

Modified: 2024-12-06T14:56:48.477

Link: CVE-2021-46998

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-02-28T00:00:00Z

Links: CVE-2021-46998 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses