CVE-2021-47235
published 2024-05-21CVE-2021-47235: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: fix potential use-after-free in ec_bhf_remove static void…
PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.23%
13.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: fix potential use-after-free in ec_bhf_remove
static void ec_bhf_remove(struct pci_dev *dev)
{
...
struct ec_bhf_priv *priv = netdev_priv(net_dev);
unregister_netdev(net_dev);
free_netdev(net_dev);
pci_iounmap(dev, priv->dma_io);
pci_iounmap(dev, priv->io);
...
}
priv is netdev private data, but it is used
after free_netdev(). It can cause use-after-free when accessing priv
pointer. So, fix it by moving free_netdev() after pci_iounmap()
calls.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.10.46-1 (bookworm) | linux 5.10.46-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 6af55ff52b02d492d45db88df3e461fa51a6f753 < db2bc3cfd2bc01621014d4f17cdfc74611f339c8 | db2bc3cfd2bc01621014d4f17cdfc74611f339c8 |
| linux | linux | >= 6af55ff52b02d492d45db88df3e461fa51a6f753 < 1cafc540b7bf1b6a5a77dc000205fe337ef6eba6 | 1cafc540b7bf1b6a5a77dc000205fe337ef6eba6 |
| linux | linux | >= 6af55ff52b02d492d45db88df3e461fa51a6f753 < b1ad283755095a4b9d1431aeb357d7df1a33d3bb | b1ad283755095a4b9d1431aeb357d7df1a33d3bb |
| linux | linux | >= 6af55ff52b02d492d45db88df3e461fa51a6f753 < 0260916843cc74f3906acf8b6f256693e01530a2 | 0260916843cc74f3906acf8b6f256693e01530a2 |
| linux | linux | >= 6af55ff52b02d492d45db88df3e461fa51a6f753 < 19f88ca68ccf8771276a606765239b167654f84a | 19f88ca68ccf8771276a606765239b167654f84a |
| linux | linux | >= 6af55ff52b02d492d45db88df3e461fa51a6f753 < 95deeb29d831e2fae608439e243e7a520611e7ea | 95deeb29d831e2fae608439e243e7a520611e7ea |
| linux | linux | >= 6af55ff52b02d492d45db88df3e461fa51a6f753 < d11d79e52ba080ee567cb7d7eb42a5ade60a8130 | d11d79e52ba080ee567cb7d7eb42a5ade60a8130 |
| linux | linux | >= 6af55ff52b02d492d45db88df3e461fa51a6f753 < 9cca0c2d70149160407bda9a9446ce0c29b6e6c6 | 9cca0c2d70149160407bda9a9446ce0c29b6e6c6 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 4.4.0-267.301 | 4.4.0-267.301 |
| linux | linux_kernel | >= 3.15 < 4.4.274 | 4.4.274 |
| linux | linux_kernel | >= 4.10 < 4.14.238 | 4.14.238 |
| linux | linux_kernel | >= 4.15 < 4.19.196 | 4.19.196 |
| linux | linux_kernel | >= 4.20 < 5.4.128 | 5.4.128 |
| linux | linux_kernel | >= 4.5 < 4.9.274 | 4.9.274 |
| linux | linux_kernel | >= 5.11 < 5.12.13 | 5.12.13 |
| linux | linux_kernel | >= 5.5 < 5.10.46 | 5.10.46 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
vendor_ubuntu5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
linux-fips vulnerabilities
osv·2025-04-09·CVSS 5.5
[MEDIUM] linux-fips vulnerabilities
linux-fips vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Drivers core;
- HID subsystem;
- Network drivers;
- SCSI subsystem;
- SuperH / SH-Mobile drivers;
- File systems infrastructure;
- Ext4 file system;
- JFS file system;
- Network file system (NFS) client;
- Memory management;
- Network namespace;
- CAIF protocol;
- Networking core;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Network traffic control;
(CVE-2025-21702, CVE-2024-53227, CVE-2024-46826, CVE-2024-49952,
CVE-2024-56600, CVE-2021-47235, CVE-2024-50265, CVE-2021-47119,
CVE-2024-53165, CVE-2021-47483, CVE-2024-50302, CVE-2024-56595,
CVE-
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
osv·2025-04-09·CVSS 5.5
[MEDIUM] linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Drivers core;
- HID subsystem;
- Network drivers;
- SCSI subsystem;
- SuperH / SH-Mobile drivers;
- File systems infrastructure;
- Ext4 file system;
- JFS file system;
- Network file system (NFS) client;
- Memory management;
- Network namespace;
- CAIF protocol;
- Networking core;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Network traffic control;
(CVE-2025-21702, CVE-2024-53227, CVE-2024-46826, CVE-2024-49952,
CVE-2024-56600, CVE-2021-47235, CVE-2024-50265, CVE-2021-47119,
CVE-2024-53165, CVE-2021-47483, C
OSV
CVE-2021-47235: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: fix potential use-after-free in ec_bhf_remove static void ec_bhf_re
osv·2024-05-21·CVSS 7.8
CVE-2021-47235 [HIGH] CVE-2021-47235: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: fix potential use-after-free in ec_bhf_remove static void ec_bhf_re
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: fix potential use-after-free in ec_bhf_remove static void ec_bhf_remove(struct pci_dev *dev) { ... struct ec_bhf_priv *priv = netdev_priv(net_dev); unregister_netdev(net_dev); free_netdev(net_dev); pci_iounmap(dev, priv->dma_io); pci_iounmap(dev, priv->io); ... } priv is netdev private data, but it is used after free_netdev(). It can cause use-after-free when accessing priv pointer. So, fix it by moving free_netdev() after pci_iounmap() calls.
GHSA
GHSA-pcr5-v468-562j: In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: fix potential use-after-free in ec_bhf_remove
static void ec_bhf_
ghsa_unreviewed·2024-05-21
CVE-2021-47235 [HIGH] CWE-416 GHSA-pcr5-v468-562j: In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: fix potential use-after-free in ec_bhf_remove
static void ec_bhf_
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: fix potential use-after-free in ec_bhf_remove
static void ec_bhf_remove(struct pci_dev *dev)
{
...
struct ec_bhf_priv *priv = netdev_priv(net_dev);
unregister_netdev(net_dev);
free_netdev(net_dev);
pci_iounmap(dev, priv->dma_io);
pci_iounmap(dev, priv->io);
...
}
priv is netdev private data, but it is used
after free_netdev(). It can cause use-after-free when accessing priv
pointer. So, fix it by moving free_netdev() after pci_iounmap()
calls.
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2025-04-09·CVSS 5.5
CVE-2024-50302 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Drivers core;
- HID subsystem;
- Network drivers;
- SCSI subsystem;
- SuperH / SH-Mobile drivers;
- File systems infrastructure;
- Ext4 file system;
- JFS file system;
- Network file system (NFS) client;
- Memory management;
- Network namespace;
- CAIF protocol;
- Networking core;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Network traffic control;
(CVE-2025-21702, CVE-2024-53227, CVE-2024-46826, CVE-2024-49952,
CVE-2024-56600, CVE-2021-47235, CVE-2024-50265, CVE-2021-
Ubuntu
Linux kernel (FIPS) vulnerabilities
vendor_ubuntu·2025-04-09·CVSS 5.5
CVE-2024-50302 [MEDIUM] Linux kernel (FIPS) vulnerabilities
Title: Linux kernel (FIPS) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Drivers core;
- HID subsystem;
- Network drivers;
- SCSI subsystem;
- SuperH / SH-Mobile drivers;
- File systems infrastructure;
- Ext4 file system;
- JFS file system;
- Network file system (NFS) client;
- Memory management;
- Network namespace;
- CAIF protocol;
- Networking core;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Network traffic control;
(CVE-2025-21702, CVE-2024-53227, CVE-2024-46826, CVE-2024-49952,
CVE-2024-56600, CVE-2021-47235, CVE-2024-50265, CV
Red Hat
kernel: net: ethernet: fix potential use-after-free in ec_bhf_remove
vendor_redhat·2024-05-21·CVSS 7.8
CVE-2021-47235 [HIGH] CWE-416 kernel: net: ethernet: fix potential use-after-free in ec_bhf_remove
kernel: net: ethernet: fix potential use-after-free in ec_bhf_remove
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: fix potential use-after-free in ec_bhf_remove
static void ec_bhf_remove(struct pci_dev *dev)
{
...
struct ec_bhf_priv *priv = netdev_priv(net_dev);
unregister_netdev(net_dev);
free_netdev(net_dev);
pci_iounmap(dev, priv->dma_io);
pci_iounmap(dev, priv->io);
...
}
priv is netdev private data, but it is used
after free_netdev(). It can cause use-after-free when accessing priv
pointer. So, fix it by moving free_netdev() after pci_iounmap()
calls.
A use-after-free vulnerability has been identified in the Linux kernel's Ethernet driver, specifically within the ec_bhf_remove() function. This flaw occurs when the function attempts to utilize a p
Debian
CVE-2021-47235: linux - In the Linux kernel, the following vulnerability has been resolved: net: ethern...
vendor_debian·2021·CVSS 7.8
CVE-2021-47235 [HIGH] CVE-2021-47235: linux - In the Linux kernel, the following vulnerability has been resolved: net: ethern...
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: fix potential use-after-free in ec_bhf_remove static void ec_bhf_remove(struct pci_dev *dev) { ... struct ec_bhf_priv *priv = netdev_priv(net_dev); unregister_netdev(net_dev); free_netdev(net_dev); pci_iounmap(dev, priv->dma_io); pci_iounmap(dev, priv->io); ... } priv is netdev private data, but it is used after free_netdev(). It can cause use-after-free when accessing priv pointer. So, fix it by moving free_netdev() after pci_iounmap() calls.
Scope: local
bookworm: resolved (fixed in 5.10.46-1)
bullseye: resolved (fixed in 5.10.46-1)
forky: resolved (fixed in 5.10.46-1)
sid: resolved (fixed in 5.10.46-1)
trixie: resolved (fixed in 5.10.46-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0260916843cc74f3906acf8b6f256693e01530a2https://git.kernel.org/stable/c/19f88ca68ccf8771276a606765239b167654f84ahttps://git.kernel.org/stable/c/1cafc540b7bf1b6a5a77dc000205fe337ef6eba6https://git.kernel.org/stable/c/95deeb29d831e2fae608439e243e7a520611e7eahttps://git.kernel.org/stable/c/9cca0c2d70149160407bda9a9446ce0c29b6e6c6https://git.kernel.org/stable/c/b1ad283755095a4b9d1431aeb357d7df1a33d3bbhttps://git.kernel.org/stable/c/d11d79e52ba080ee567cb7d7eb42a5ade60a8130https://git.kernel.org/stable/c/db2bc3cfd2bc01621014d4f17cdfc74611f339c8https://git.kernel.org/stable/c/0260916843cc74f3906acf8b6f256693e01530a2https://git.kernel.org/stable/c/19f88ca68ccf8771276a606765239b167654f84ahttps://git.kernel.org/stable/c/1cafc540b7bf1b6a5a77dc000205fe337ef6eba6https://git.kernel.org/stable/c/95deeb29d831e2fae608439e243e7a520611e7eahttps://git.kernel.org/stable/c/9cca0c2d70149160407bda9a9446ce0c29b6e6c6https://git.kernel.org/stable/c/b1ad283755095a4b9d1431aeb357d7df1a33d3bbhttps://git.kernel.org/stable/c/d11d79e52ba080ee567cb7d7eb42a5ade60a8130https://git.kernel.org/stable/c/db2bc3cfd2bc01621014d4f17cdfc74611f339c8
2024-05-21
Published