VYPR
High severity7.8NVD Advisory· Published Feb 27, 2024· Updated Aug 4, 2026

CVE-2021-46973

CVE-2021-46973

Description

In the Linux kernel, the following vulnerability has been resolved:

net: qrtr: Avoid potential use after free in MHI send

It is possible that the MHI ul_callback will be invoked immediately following the queueing of the skb for transmission, leading to the callback decrementing the refcount of the associated sk and freeing the skb.

As such the dereference of skb and the increment of the sk refcount must happen before the skb is queued, to avoid the skb to be used after free and potentially the sk to drop its last refcount..

Affected products

3
  • Linux/Kernel3 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.8,<= 5.10.35
    • (no CPE)
    • (no CPE)range: 5.8

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.