CVE Database›Document archive›CVE-2021-47251

CVE-2021-47251

kernel: mac80211: fix skb length check in ieee80211_scan_rx()

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · May 21, 2024

Updated · October 30, 2026

Description

A flaw was found in the mac80211 subsystem of the Linux kernel. This vulnerability may allow a local user to cause a Denial of Service (DoS) by crashing the operating system. The issue occurs due to an incorrect packet header length check in the scan receive function (ieee80211_scan_rx), which relies on fixed compile-time constants rather than evaluating the frame type dynamically. Processing an unexpected frame triggers an internal kernel validation failure, resulting in system instability.

Statement

Red Hat has stack protection mechanisms in place, such as FORTIFY_SOURCE, Position Independent Executables or Stack Smashing Protection.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-99 · Improper Control of Resource Identifiers ('Resource Injection')