CVE-2021-47388

A vulnerability was found in the Linux kernel’s mac80211 driver related to the handling of CCMP/GCMP frames, durning the process of checking the Packet Number (PN) for fragmented frames where the code may use an invalid pointer due to reallocations of the frame data causing use-after-free condition, which can potentially lead to data corruption or system instability if the freed memory is accessed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.