Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47306

net: fddi: fix UAF in fza_probe

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: fddi: fix UAF in fza_probe fp is netdev private data and it cannot be used after free_netdev() call. Using fp after free_netdev() can cause UAF bug. Fix it by moving free_netdev() after error message. TURBOchannel adapter")

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 61414f5ec9834df8aa4f55c90de16b71a3d6ca8d to < 04b06716838bfc26742dbed3ae1d3697fe5317eeaffected
  • 61414f5ec9834df8aa4f55c90de16b71a3d6ca8d to < f33605908a9b6063525e9f68e62d739948c5fccfaffected
  • 61414f5ec9834df8aa4f55c90de16b71a3d6ca8d to < bdfbb51f7a437ae8ea91317a5c133ec13adf3c47affected
  • 61414f5ec9834df8aa4f55c90de16b71a3d6ca8d to < deb7178eb940e2c5caca1b1db084a69b2e59b4c9affected

Linux Linux

Default version status: affected

  • 4.20affected
  • 0 to < 4.20unaffected
  • 5.4.135 to ≤ 5.4.*unaffected
  • 5.10.53 to ≤ 5.10.*unaffected
  • 5.13.5 to ≤ 5.13.*unaffected
  • 5.14 to ≤ *unaffected

References