CVE-2021-47670CWE-416

CVE-2021-47670

High · published April 17, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
12.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

can: peak_usb: fix use after free bugs

After calling peak_usb_netif_rx_ni(skb), dereferencing skb is unsafe.

Especially, the can_frame cf which aliases skb memory is accessed

after the peak_usb_netif_rx_ni().

Reordering the lines solves the issue.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00224 · 12.3th percentile
Weakness
CWE-416 · Use After Free
Published
2025-04-17T22:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 4.0, < 4.19.1714.19.171
linux/linux_kernel≥ 4.20, < 5.4.935.4.93
linux/linux_kernel≥ 5.5, < 5.10.115.10.11
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
https://git.kernel.org/stable/c/50aca891d7a554db0901b245167cd653d73aaa71 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5408824636fa0dfedb9ecb0d94abd573131bfbbe · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ddd1416f44130377798c1430b76503513b7497c2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ec939c13c3fff2114479769c8380b7f1a54feca9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 17 APR 18:01Z
    can: peak_usb: fix use after free bugs
    cvelistv5