← Database

CVE-2021-46991

HIGH CVSS: 7.8 Published: 2024-02-28 Modified: 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix use-after-free in i40e_client_subtask() Currently the call to i40e_client_del_instance frees the object pf->cinst, however pf->cinst->lan_info is being accessed after the free. Fix this by adding the missing return. Addresses-Coverity: ("Read from pointer after free")

Affected Platforms

Linux Linux Kernel

Weakness Type

CWE-416

References