CVE-2021-43976

MEDIUM 4.6CVE-2021-43976 · Published 17/11/2021 · updated 17/06/2026

In short

CVE-2021-43976 is a MEDIUM (CVSS 4.6) vulnerability affecting communications cloud native core binding support function (oracle), communications cloud native core network exposure function (oracle), communications cloud native core policy (oracle).
Chance of exploitation in the next 30 days (EPSS): 0.69%, higher than 52.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
communications cloud native core binding support function oracle	`= 22.1.3`	No fix yet
communications cloud native core network exposure function oracle	`= 22.1.1`	No fix yet
communications cloud native core policy oracle	`= 22.2.0`	No fix yet

Description

In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (who can connect a crafted USB device) to cause a denial of service (skb_over_panic).

References

git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit
lists.debian.org/debian-lts-announce/2022/03/msg00011.html · Mailing List
lists.debian.org/debian-lts-announce/2022/03/msg00012.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X24M7KDC4OJOZNS3RDSYC7ELNELOLQ2N
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YODMYMGZYDXQKGJGX7TJG4XV4L5YLLBD
patchwork.kernel.org/project/linux-wireless/patch/YX4CqjfRcTa6bVL+%40Zekuns-MBP-16.fios-router.home
security.netapp.com/advisory/ntap-20211210-0001 · Third Party Advisory
debian.org/security/2022/dsa-5092 · Third Party Advisory
debian.org/security/2022/dsa-5096 · Third Party Advisory

More vulnerabilities in communications cloud native core binding support function

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free