Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-47232

can: j1939: fix Use-after-Free, hold skb ref while in use

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: can: j1939: fix Use-after-Free, hold skb ref while in use This patch fixes a Use-after-Free found by the syzbot. The problem is that a skb is taken from the per-session skb queue, without incrementing the ref count. This leads to a Use-after-Free if the skb is taken concurrently from the session queue due to a CTS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9d71dd0c70099914fcd063135da3c580865e924c to < 22cba878abf646cd3a02ee7c8c2cef7afe66a256affected
  • 9d71dd0c70099914fcd063135da3c580865e924c to < 509ab6bfdd0c76daebbad0f0af07da712116de22affected
  • 9d71dd0c70099914fcd063135da3c580865e924c to < 1071065eeb33d32b7d98c2ce7591881ae7381705affected
  • 9d71dd0c70099914fcd063135da3c580865e924c to < 2030043e616cab40f510299f09b636285e0a3678affected

Linux Linux

Default version status: affected

  • 5.4affected
  • 0 to < 5.4unaffected
  • 5.4.128 to ≤ 5.4.*unaffected
  • 5.10.46 to ≤ 5.10.*unaffected
  • 5.12.13 to ≤ 5.12.*unaffected
  • 5.13 to ≤ *unaffected

References