CVE-2021-47251
kernel: mac80211: fix skb length check in ieee80211_scan_rx()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 21, 2024
Updated · October 30, 2026
Description
A flaw was found in the mac80211 subsystem of the Linux kernel. This vulnerability may allow a local user to cause a Denial of Service (DoS) by crashing the operating system. The issue occurs due to an incorrect packet header length check in the scan receive function (ieee80211_scan_rx), which relies on fixed compile-time constants rather than evaluating the frame type dynamically. Processing an unexpected frame triggers an internal kernel validation failure, resulting in system instability.
Statement
Red Hat has stack protection mechanisms in place, such as FORTIFY_SOURCE, Position Independent Executables or Stack Smashing Protection.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-99 · Improper Control of Resource Identifiers ('Resource Injection')