cbcvebase.
CVE-2021-47232
published 2024-05-21

CVE-2021-47232: In the Linux kernel, the following vulnerability has been resolved: can: j1939: fix Use-after-Free, hold skb ref while in use This patch fixes a Use-after-Free…

PriorityP338high8.4CVSS 3.1
AVLACLPRNUINSUCHIHAH
EPSS
0.24%
15.1th percentile
In the Linux kernel, the following vulnerability has been resolved: can: j1939: fix Use-after-Free, hold skb ref while in use This patch fixes a Use-after-Free found by the syzbot. The problem is that a skb is taken from the per-session skb queue, without incrementing the ref count. This leads to a Use-after-Free if the skb is taken concurrently from the session queue due to a CTS.

Affected

14 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.10.46-1 (bookworm)linux 5.10.46-1 (bookworm)
linuxlinux
linuxlinux>= 9d71dd0c70099914fcd063135da3c580865e924c < 22cba878abf646cd3a02ee7c8c2cef7afe66a25622cba878abf646cd3a02ee7c8c2cef7afe66a256
linuxlinux>= 9d71dd0c70099914fcd063135da3c580865e924c < 509ab6bfdd0c76daebbad0f0af07da712116de22509ab6bfdd0c76daebbad0f0af07da712116de22
linuxlinux>= 9d71dd0c70099914fcd063135da3c580865e924c < 1071065eeb33d32b7d98c2ce7591881ae73817051071065eeb33d32b7d98c2ce7591881ae7381705
linuxlinux>= 9d71dd0c70099914fcd063135da3c580865e924c < 2030043e616cab40f510299f09b636285e0a36782030043e616cab40f510299f09b636285e0a3678
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.46-15.10.46-1
linuxlinux_kernel>= 0 < 5.10.46-15.10.46-1
linuxlinux_kernel>= 0 < 5.10.46-15.10.46-1
linuxlinux_kernel>= 0 < 5.10.46-15.10.46-1
linuxlinux_kernel>= 5.11 < 5.12.135.12.13
linuxlinux_kernel>= 5.4 < 5.4.1285.4.128
linuxlinux_kernel>= 5.5 < 5.10.465.10.46

CVSS provenance

nvdv3.18.4HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv8.4HIGH
vendor_debian8.4HIGH
vendor_redhat8.4HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.