Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47521

can: sja1000: fix use after free in ems_pcmcia_add_card()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: can: sja1000: fix use after free in ems_pcmcia_add_card() If the last channel is not available then "dev" is freed. Fortunately, we can just use "pdev->irq" instead. Also we should check if at least one channel was set up.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • fd734c6f25aea4b2b44b045e489aec67b388577e to < cbd86110546f7f730a1f5d7de56c944a336c15c4affected
  • fd734c6f25aea4b2b44b045e489aec67b388577e to < 1dd5b819f7e406dc15bbc7670596ff25261aaa2aaffected
  • fd734c6f25aea4b2b44b045e489aec67b388577e to < c8718026ba287168ff9ad0ccc4f9a413062cba36affected
  • fd734c6f25aea4b2b44b045e489aec67b388577e to < ccf070183e4655824936c0f96c4a2bcca93419aaaffected
  • fd734c6f25aea4b2b44b045e489aec67b388577e to < 1a295fea90e1acbe80c6d4940f5ff856edcd6becaffected
  • fd734c6f25aea4b2b44b045e489aec67b388577e to < 923f4dc5df679f678e121c20bf2fd70f7bf3e288affected
  • fd734c6f25aea4b2b44b045e489aec67b388577e to < 474f9a8534f5f89841240a7e978bafd6e1e039ceaffected
  • fd734c6f25aea4b2b44b045e489aec67b388577e to < 3ec6ca6b1a8e64389f0212b5a1b0f6fed1909e45affected

Linux Linux

Default version status: affected

  • 3.2affected
  • 0 to < 3.2unaffected
  • 4.4.295 to ≤ 4.4.*unaffected
  • 4.9.293 to ≤ 4.9.*unaffected
  • 4.14.258 to ≤ 4.14.*unaffected
  • 4.19.221 to ≤ 4.19.*unaffected
  • 5.4.165 to ≤ 5.4.*unaffected
  • 5.10.85 to ≤ 5.10.*unaffected
  • 5.15.8 to ≤ 5.15.*unaffected
  • 5.16 to ≤ *unaffected

References