CVE-2021-47194: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type If the userspace tools switch from NL80211_IFTYPE_P2P_GO to NL80211_IFTYPE_ADHOC via send_msg(NL80211_CMD_SET_INTERFACE), it does not call the cleanup cfg80211_stop_ap(), this leads to the initialization of in-use data. For example, this path re-init the sdata->assigned_chanctx_list while it is still an element of assigned_vifs list, and makes that linked list corrupt.

Affected products

• Linux Linux Kernel: from 3.6.0, before 4.4.293 (fixed in 4.4.293); from 4.5.0, before 4.9.291 (fixed in 4.9.291); from 4.10.0, before 4.14.256 (fixed in 4.14.256); from 4.15.0, before 4.19.218 (fixed in 4.19.218); from 4.20.0, before 5.4.162 (fixed in 5.4.162); from 5.5.0, before 5.10.82 (fixed in 5.10.82); …

Published 2024-04-10. Last modified 2026-08-04.