Loading story…
CVE-2021-47284 affects the Linux kernel's mISDN Netjet ISDN driver (drivers/isdn/hardware/mISDN/netjet.c). When nj_setup fails with -EIO after the driver initializes card->irq, its cleanup routine can call free_irq for an interrupt that was never requested. This produces a kernel warning and can crash the system when panic_on_warn is enabled, creating a locally exploitable availability risk for systems using the affected hardware.
The fix removes the premature IRQ assignment and preserves assignment immediately before request_irq. Fixed Linux stable releases include 4.4.273, 4.9.273, 4.14.237, 4.19.195, 5.4.126, 5.10.44, 5.12.11, and 5.13; organizations should deploy a current stable kernel. Red Hat rated the issue Low severity (CVSS 3.1: 5.5) and issued fixes for RHEL 8 kernel and kernel-rt; RHEL 9 is not affected, while RHEL 6 and 7 are out of support.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
Red Hat fixed CVE-2021-47284 in Red Hat Enterprise Linux 8 kernel and kernel-rt updates through advisories RHSA-2024:5101 and RHSA-2024:5102. The issue can cause a denial of service when the Netjet driver's probe error path frees an unrequested IRQ.
The Linux kernel CVE team assigned CVE-2021-47284 to an mISDN Netjet driver flaw in which error handling can free an IRQ that was never requested, potentially causing a kernel panic. Fixes were incorporated into stable kernel versions 4.4.273, 4.9.273, 4.14.237, 4.19.195, 5.4.126, 5.10.44, 5.12.11, and 5.13.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
**CVE-2021-47468** affects the Linux kernel's mISDN NetJet ISDN driver, where `card->isac.release()` can be invoked while a lock is held in an atomic context. Because the release path may sleep, a local attacker able to exercise the affected device-removal path could trigger a kernel fault or denial of service. The upstream fix defers the release-function call until after the lock has been released. The fix was backported to stable kernels including 4.4.290, 4.9.288, 4.14.253, 4.19.214, 5.4.156, 5.10.76, 5.14.15, and 5.15. Red Hat rated the flaw Low severity (CVSS 4.4) and released RHEL 8 kernel updates through advisories including **RHSA-2024:5101** and **RHSA-2024:5102**; RHEL 9 is not affected. Organizations should deploy their vendor's current kernel updates rather than cherry-picking the upstream patch.
Aug 26, 2026
**CVE-2023-42754** is a moderate-severity NULL-pointer dereference in the Linux kernel IPv4 routing stack that can allow a local attacker to crash an affected host. When traffic is rerouted through IPVS, an `sk_buff` may lack an associated network device, but `ipv4_send_dest_unreach()` assumes `skb->dev` is present and dereferences it through `dev_net(skb->dev)`, triggering a kernel panic. A proof of concept produced a KASAN-detected fault and fatal panic on a Linux 6.1.47+ test kernel. The upstream correction, commit `0113d9c9d1ccc07f5a3710dac4aa24b6d711278c`, was incorporated in Linux 6.6-rc3 and queued for stable kernel branches from 4.14 through 6.5. Red Hat rates the issue CVSS 5.5, with high availability impact and no confidentiality or integrity impact; fixed kernel packages are available for RHEL 8 and RHEL 9, while RHEL 9 `kernel-rt` remained affected in Red Hat's advisory. RHEL 6, RHEL 7, and RHEL 7 `kernel-rt` are not affected, and Red Hat lists no qualifying mitigation beyond applying updated packages.
Aug 26, 2026
**CVE-2024-46679** is a moderate-severity Linux kernel flaw in ethtool link-settings handling that can cause a kernel panic when a sysfs reader races with a network device being reset or removed. The issue, observed in the qede driver path, permits `__ethtool_get_link_ksettings()` callers to access device state after it is no longer present, affecting availability only. It has a CVSS v3.1 score of 4.7 and requires local access, low privileges, and high attack complexity. The defect has existed since Linux 2.6.33 and affects `net/core/net-sysfs.c` and `net/ethtool/ioctl.c`. Upstream fixes add a device-presence check for all ethtool callers and are included in stable kernels 5.4.283, 5.10.225, 5.15.166, 6.1.108, 6.6.49, 6.10.8, and 6.11-rc6. Red Hat issued fixes for affected RHEL 8 and 9 streams through errata including RHSA-2024:8107, RHSA-2024:8856, and RHSA-2024:10274; organizations should apply the applicable vendor kernel updates, noting that Red Hat may backport fixes without changing to the listed upstream version.
Aug 26, 2026