VYPR
Unrated severityNVD Advisory· Published Feb 28, 2024· Updated May 4, 2025

i40e: Fix use-after-free in i40e_client_subtask()

CVE-2021-46991

Description

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix use-after-free in i40e_client_subtask()

Currently the call to i40e_client_del_instance frees the object pf->cinst, however pf->cinst->lan_info is being accessed after the free. Fix this by adding the missing return.

Addresses-Coverity: ("Read from pointer after free")

Affected products

90

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.