Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-47520

can: pch_can: pch_can_rx_normal: fix use after free

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: can: pch_can: pch_can_rx_normal: fix use after free After calling netif_receive_skb(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is dereferenced just after the call netif_receive_skb(skb). Reordering the lines solves the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b21d18b51b31a24d17f883b678432fbdee3d5675 to < bafe343a885c70dddf358379cf0b2a1c07355d8daffected
  • b21d18b51b31a24d17f883b678432fbdee3d5675 to < 3a3c46e2eff0577454860a203be1a8295f4acb76affected
  • b21d18b51b31a24d17f883b678432fbdee3d5675 to < affbad02bf80380a7403885b9fe4a1587d1bb4f3affected
  • b21d18b51b31a24d17f883b678432fbdee3d5675 to < 3e193ef4e0a3f5bf92ede83ef214cb09d01b00aaaffected
  • b21d18b51b31a24d17f883b678432fbdee3d5675 to < abb4eff3dcd2e583060082a18a8dbf31f02689d4affected
  • b21d18b51b31a24d17f883b678432fbdee3d5675 to < 703dde112021c93d6e89443c070e7dbd4dea612eaffected
  • b21d18b51b31a24d17f883b678432fbdee3d5675 to < 6c73fc931658d8cbc8a1714b326cb31eb71d16a7affected
  • b21d18b51b31a24d17f883b678432fbdee3d5675 to < 94cddf1e9227a171b27292509d59691819c458dbaffected

Linux Linux

Default version status: affected

  • 2.6.37affected
  • 0 to < 2.6.37unaffected
  • 4.4.295 to ≤ 4.4.*unaffected
  • 4.9.293 to ≤ 4.9.*unaffected
  • 4.14.258 to ≤ 4.14.*unaffected
  • 4.19.221 to ≤ 4.19.*unaffected
  • 5.4.165 to ≤ 5.4.*unaffected
  • 5.10.85 to ≤ 5.10.*unaffected
  • 5.15.8 to ≤ 5.15.*unaffected
  • 5.16 to ≤ *unaffected

References