CVE-2021-47611

HIGH

Linux Kernel 4.19-4.19.221 - Denial of Service via Missing Extended Element ID Validation

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: mac80211: validate extended element ID is present Before attempting to parse an extended element, verify that the extended element ID is present.

References (5)

Core 5

Core References

Patch

https://git.kernel.org/stable/c/03029bb044ccee60adbc93e70713f3ae58abc3a1

Patch

https://git.kernel.org/stable/c/a19cf6844b509d44ecbd536f33d314d91ecdd2b5

Patch

https://git.kernel.org/stable/c/7fd214fc7f2ee3a89f91e717e3cfad55f5a27045

Patch

https://git.kernel.org/stable/c/c62b16f98688ae7bc0ab23a6490481f4ce9b3a49

Patch

https://git.kernel.org/stable/c/768c0b19b50665e337c96858aa2b7928d6dcf756

Scores

CVSS v3 8.1

EPSS 0.0034

EPSS Percentile 26.4%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (14)

Linux/Linux < 4.19

Linux/Linux 4.19

Linux/Linux 4.19.222 - 4.19.*

Linux/Linux 41cbb0f5a29592874355e4159489eb08337cd50e - 03029bb044ccee60adbc93e70713f3ae58abc3a1

Linux/Linux 41cbb0f5a29592874355e4159489eb08337cd50e - 768c0b19b50665e337c96858aa2b7928d6dcf756

Linux/Linux 41cbb0f5a29592874355e4159489eb08337cd50e - 7fd214fc7f2ee3a89f91e717e3cfad55f5a27045

Linux/Linux 41cbb0f5a29592874355e4159489eb08337cd50e - a19cf6844b509d44ecbd536f33d314d91ecdd2b5

Linux/Linux 41cbb0f5a29592874355e4159489eb08337cd50e - c62b16f98688ae7bc0ab23a6490481f4ce9b3a49

Linux/Linux 5.10.88 - 5.10.*

Linux/Linux 5.15.11 - 5.15.*

... and 4 more

Published Jun 19, 2024

Tracked Since Feb 18, 2026