exploitDog

CVE-2021-47668

Опубликовано: 17 апр. 2025

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

can: dev: can_restart: fix use after free bug

After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is accessed after the netif_rx_ni() in: stats->rx_bytes += cf->len;

Reordering the lines solves the issue.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 2.6.31 (включая) до 4.4.254 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.5 (включая) до 4.9.254 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.10 (включая) до 4.14.218 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.15 (включая) до 4.19.171 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.20 (включая) до 5.4.93 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.5 (включая) до 5.10.11 (исключая)

cpe:2.3:o:linux:linux_kernel:5.11:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:5.11:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:5.11:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:5.11:rc4:*:*:*:*:*:*

EPSS

Процентиль: 6%

0.00024

Низкий

7.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2021-47668

CVSS3: 7.8

ubuntu

10 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: can: dev: can_restart: fix use after free bug After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is accessed after the netif_rx_ni() in: stats->rx_bytes += cf->len; Reordering the lines solves the issue.

CVE-2021-47668

CVSS3: 5.5

redhat

10 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: can: dev: can_restart: fix use after free bug After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is accessed after the netif_rx_ni() in: stats->rx_bytes += cf->len; Reordering the lines solves the issue.

CVE-2021-47668

CVSS3: 7.8

debian

10 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: c ...

GHSA-78xp-xvw2-6rw6

CVSS3: 7.8

github

10 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: can: dev: can_restart: fix use after free bug After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is accessed after the netif_rx_ni() in: stats->rx_bytes += cf->len; Reordering the lines solves the issue.

SUSE-SU-2025:01633-1

suse-cvrf

9 месяцев назад

Security update for the Linux Kernel

EPSS

Процентиль: 6%

0.00024

Низкий

7.8 High

CVSS3

Дефекты

CWE-416