What’s Vulnerable › Vulnerabilities

CVE-2021-47251: mac80211: fix skb length check in ieee80211_scan_rx()

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-21 · updated 2026-06-17
• Weakness: CWE-1284

Description

In the Linux kernel, the following vulnerability has been resolved: mac80211: fix skb length check in ieee80211_scan_rx() Replace hard-coded compile-time constants for header length check with dynamic determination based on the frame type. Otherwise, we hit a validation WARN_ON in cfg80211 later. [style fixes, reword commit message]

Affected products

• Linux kernel: from 5.10 before 5.10.46; from 5.11 before 5.12.13; 5.13-rc1, 5.13-rc2, 5.13-rc3, 5.13-rc4, 5.13-rc5, 5.13-rc6 — fixed in 5.10.46, 5.12.13

How to fix

Upgrade to a fixed version: Linux kernel 5.10.46, 5.12.13. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/5a1cd67a801cf5ef989c4783e07b86a25b143126
• https://git.kernel.org/stable/c/d1b949c70206178b12027f66edc088d40375b5cb
• https://git.kernel.org/stable/c/e298aa358f0ca658406d524b6639fe389cb6e11e
• https://git.kernel.org/stable/c/5a1cd67a801cf5ef989c4783e07b86a25b143126
• https://git.kernel.org/stable/c/d1b949c70206178b12027f66edc088d40375b5cb
• https://git.kernel.org/stable/c/e298aa358f0ca658406d524b6639fe389cb6e11e

Get alerted when CVE-2021-47251 or the next vulnerability affects your stack