Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47239

net: usb: fix possible use-after-free in smsc75xx_bind

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: usb: fix possible use-after-free in smsc75xx_bind The commit 46a8b29c6306 ("net: usb: fix memory leak in smsc75xx_bind") fails to clean up the work scheduled in smsc75xx_reset-> smsc75xx_set_multicast, which leads to use-after-free if the work is scheduled to start after the deallocation. In addition, this patch also removes a dangling pointer - dev->data[0]. This patch calls cancel_work_sync to cancel the scheduled work and set the dangling pointer to NULL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 200dbfcad8011e50c3cec269ed7b980836eeb1fa to < 7cc8b2e05fcea6edd022d26e82091d781af8fd9baffected
  • 22c840596af0c09068b6cf948616e6496e59e07f to < 64160d1741a3de5204d1a822e058e0b4cc526504affected
  • 9e6b8c1ff9d997e1fa16cbd2d60739adf6dc1bbc to < c4e3be2e7742863e454ce31faf8fd0109c00050baffected
  • 9e6a3eccb28779710cbbafc4f4258d92509c6d07 to < 2fc8300c9cfa5167fcb5b1a2a07db6f53e82f59baffected
  • b95fb96e6339e34694dd578fb6bde3575b01af17 to < 4252bf6c2b245f47011098113d405ffad6ad5d5baffected
  • 635ac38b36255d3cfb8312cf7c471334f4d537e0 to < 570a52cf3e01d19f7fd1a251dfc52b0cd86c13cbaffected
  • 70c886ac93f87ae7214a0c69151a28a8075dd95b to < 14616c372a7be01a2fb8c56c9d8debd232b9e43daffected
  • 46a8b29c6306d8bbfd92b614ef65a47c900d8e70 to < 56b786d86694e079d8aad9b314e015cd4ac02a3daffected

Linux Linux

Default version status: unaffected

  • 4.4.271 to < 4.4.274affected
  • 4.9.271 to < 4.9.274affected
  • 4.14.235 to < 4.14.238affected
  • 4.19.193 to < 4.19.196affected
  • 5.4.124 to < 5.4.128affected
  • 5.10.42 to < 5.10.46affected
  • 5.12.9 to < 5.12.13affected

References