#VU93467 Resource management error in Linux kernel - CVE-2021-47395

Vulnerability identifier: #VU93467

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47395

CWE-ID: CWE-399

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the ieee80211_parse_tx_radiotap() function in net/mac80211/tx.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/e5bb852aa2ad963074f0ad73030dbc20a30853e3
https://git.kernel.org/stable/c/ce5f372f5f084ff51c285fc27b232f15a3d00f0b
https://git.kernel.org/stable/c/76538c7b4df314bb937e44c5cb1782f37d47443c
https://git.kernel.org/stable/c/ab85997465b972d39d9747fc16311fa5773374b2
https://git.kernel.org/stable/c/1282bb00835ff79d2d9c023055d514df5b4de260
https://git.kernel.org/stable/c/997ee230e4f5285cd98445c102d9033c7ec4814b
https://git.kernel.org/stable/c/13cb6d826e0ac0d144b0d48191ff1a111d32f0c6

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.