CVE-2021-47611 : In the Linux kernel, the following vulnerability has been resolved: mac80211: v

In the Linux kernel, the following vulnerability has been resolved: mac80211: validate extended element ID is present Before attempting to parse an extended element, verify that the extended element ID is present.

Published 2024-06-19 14:58:00

Updated 2024-10-30 21:32:55

Source Linux

View at NVD, CVE.org

Products affected by CVE-2021-47611

Linux » Linux Kernel
Versions from including (>=) 5.11 and before (<) 5.15.11
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.20 and before (<) 5.4.168
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.19 and before (<) 4.19.222
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 5.5 and before (<) 5.10.88
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 5.16 Update RC1
cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 5.16 Update RC2
cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 5.16 Update RC3
cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 5.16 Update RC4
cpe:2.3:o:linux:linux_kernel:5.16:rc4:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 5.16 Update RC5
cpe:2.3:o:linux:linux_kernel:5.16:rc5:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2021-47611

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 15 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-47611

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST	2024-10-30
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

References for CVE-2021-47611

https://git.kernel.org/stable/c/768c0b19b50665e337c96858aa2b7928d6dcf756

mac80211: validate extended element ID is present - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/7fd214fc7f2ee3a89f91e717e3cfad55f5a27045

mac80211: validate extended element ID is present - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/03029bb044ccee60adbc93e70713f3ae58abc3a1

mac80211: validate extended element ID is present - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/c62b16f98688ae7bc0ab23a6490481f4ce9b3a49

mac80211: validate extended element ID is present - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/a19cf6844b509d44ecbd536f33d314d91ecdd2b5

mac80211: validate extended element ID is present - kernel/git/stable/linux.git - Linux kernel stable tree
Patch

Jump to

Vulnerability Details : CVE-2021-47611

Products affected by CVE-2021-47611

Exploit prediction scoring system (EPSS) score for CVE-2021-47611

CVSS scores for CVE-2021-47611

References for CVE-2021-47611