CVE-2021-47236
published 2024-05-21CVE-2021-47236: In the Linux kernel, the following vulnerability has been resolved: net: cdc_eem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.23%
13.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: cdc_eem: fix tx fixup skb leak
when usbnet transmit a skb, eem fixup it in eem_tx_fixup(),
if skb_copy_expand() failed, it return NULL,
usbnet_start_xmit() will have no chance to free original skb.
fix it by free orginal skb in eem_tx_fixup() first,
then check skb clone status, if failed, return NULL to usbnet.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.10.46-1 (bookworm) | linux 5.10.46-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 9f722c0978b04acba209f8ca1896ad05814bc3a3 < f12554b0ff639e74612cc01b3b4a049e098d2d65 | f12554b0ff639e74612cc01b3b4a049e098d2d65 |
| linux | linux | >= 9f722c0978b04acba209f8ca1896ad05814bc3a3 < 14184ec5c958b589ba934da7363a2877879204df | 14184ec5c958b589ba934da7363a2877879204df |
| linux | linux | >= 9f722c0978b04acba209f8ca1896ad05814bc3a3 < 1bcacd6088d61c0ac6a990d87975600a81f3247e | 1bcacd6088d61c0ac6a990d87975600a81f3247e |
| linux | linux | >= 9f722c0978b04acba209f8ca1896ad05814bc3a3 < f4e6a7f19c82f39b1803e91c54718f0d7143767d | f4e6a7f19c82f39b1803e91c54718f0d7143767d |
| linux | linux | >= 9f722c0978b04acba209f8ca1896ad05814bc3a3 < 81de2ed06df8b5451e050fe6a318af3263dbff3f | 81de2ed06df8b5451e050fe6a318af3263dbff3f |
| linux | linux | >= 9f722c0978b04acba209f8ca1896ad05814bc3a3 < 05b2b9f7d24b5663d9b47427fe1555bdafd3ea02 | 05b2b9f7d24b5663d9b47427fe1555bdafd3ea02 |
| linux | linux | >= 9f722c0978b04acba209f8ca1896ad05814bc3a3 < b4f7a9fc9d094c0c4a66f2ad7c37b1dbe9e78f88 | b4f7a9fc9d094c0c4a66f2ad7c37b1dbe9e78f88 |
| linux | linux | >= 9f722c0978b04acba209f8ca1896ad05814bc3a3 < c3b26fdf1b32f91c7a3bc743384b4a298ab53ad7 | c3b26fdf1b32f91c7a3bc743384b4a298ab53ad7 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 2.6.30 < 4.4.274 | 4.4.274 |
| linux | linux_kernel | >= 4.10 < 4.14.238 | 4.14.238 |
| linux | linux_kernel | >= 4.15 < 4.19.196 | 4.19.196 |
| linux | linux_kernel | >= 4.20 < 5.4.128 | 5.4.128 |
| linux | linux_kernel | >= 4.5 < 4.9.274 | 4.9.274 |
| linux | linux_kernel | >= 5.11 < 5.12.13 | 5.12.13 |
| linux | linux_kernel | >= 5.5 < 5.10.46 | 5.10.46 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: net: cdc_eem: fix tx fixup skb leak
vendor_redhat·2024-05-21·CVSS 5.5
CVE-2021-47236 [MEDIUM] CWE-402 kernel: net: cdc_eem: fix tx fixup skb leak
kernel: net: cdc_eem: fix tx fixup skb leak
In the Linux kernel, the following vulnerability has been resolved:
net: cdc_eem: fix tx fixup skb leak
when usbnet transmit a skb, eem fixup it in eem_tx_fixup(),
if skb_copy_expand() failed, it return NULL,
usbnet_start_xmit() will have no chance to free original skb.
fix it by free orginal skb in eem_tx_fixup() first,
then check skb clone status, if failed, return NULL to usbnet.
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 9) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 9) - Not affected
Debian
CVE-2021-47236: linux - In the Linux kernel, the following vulnerability has been resolved: net: cdc_ee...
vendor_debian·2021·CVSS 5.5
CVE-2021-47236 [MEDIUM] CVE-2021-47236: linux - In the Linux kernel, the following vulnerability has been resolved: net: cdc_ee...
In the Linux kernel, the following vulnerability has been resolved: net: cdc_eem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in eem_tx_fixup(), if skb_copy_expand() failed, it return NULL, usbnet_start_xmit() will have no chance to free original skb. fix it by free orginal skb in eem_tx_fixup() first, then check skb clone status, if failed, return NULL to usbnet.
Scope: local
bookworm: resolved (fixed in 5.10.46-1)
bullseye: resolved (fixed in 5.10.46-1)
forky: resolved (fixed in 5.10.46-1)
sid: resolved (fixed in 5.10.46-1)
trixie: resolved (fixed in 5.10.46-1)
OSV
CVE-2021-47236: In the Linux kernel, the following vulnerability has been resolved: net: cdc_eem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in ee
osv·2024-05-21·CVSS 5.5
CVE-2021-47236 [MEDIUM] CVE-2021-47236: In the Linux kernel, the following vulnerability has been resolved: net: cdc_eem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in ee
In the Linux kernel, the following vulnerability has been resolved: net: cdc_eem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in eem_tx_fixup(), if skb_copy_expand() failed, it return NULL, usbnet_start_xmit() will have no chance to free original skb. fix it by free orginal skb in eem_tx_fixup() first, then check skb clone status, if failed, return NULL to usbnet.
GHSA
GHSA-3w59-vx6f-4274: In the Linux kernel, the following vulnerability has been resolved:
net: cdc_eem: fix tx fixup skb leak
when usbnet transmit a skb, eem fixup it in
ghsa_unreviewed·2024-05-21
CVE-2021-47236 [MEDIUM] CWE-401 GHSA-3w59-vx6f-4274: In the Linux kernel, the following vulnerability has been resolved:
net: cdc_eem: fix tx fixup skb leak
when usbnet transmit a skb, eem fixup it in
In the Linux kernel, the following vulnerability has been resolved:
net: cdc_eem: fix tx fixup skb leak
when usbnet transmit a skb, eem fixup it in eem_tx_fixup(),
if skb_copy_expand() failed, it return NULL,
usbnet_start_xmit() will have no chance to free original skb.
fix it by free orginal skb in eem_tx_fixup() first,
then check skb clone status, if failed, return NULL to usbnet.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/05b2b9f7d24b5663d9b47427fe1555bdafd3ea02https://git.kernel.org/stable/c/14184ec5c958b589ba934da7363a2877879204dfhttps://git.kernel.org/stable/c/1bcacd6088d61c0ac6a990d87975600a81f3247ehttps://git.kernel.org/stable/c/81de2ed06df8b5451e050fe6a318af3263dbff3fhttps://git.kernel.org/stable/c/b4f7a9fc9d094c0c4a66f2ad7c37b1dbe9e78f88https://git.kernel.org/stable/c/c3b26fdf1b32f91c7a3bc743384b4a298ab53ad7https://git.kernel.org/stable/c/f12554b0ff639e74612cc01b3b4a049e098d2d65https://git.kernel.org/stable/c/f4e6a7f19c82f39b1803e91c54718f0d7143767dhttps://git.kernel.org/stable/c/05b2b9f7d24b5663d9b47427fe1555bdafd3ea02https://git.kernel.org/stable/c/14184ec5c958b589ba934da7363a2877879204dfhttps://git.kernel.org/stable/c/1bcacd6088d61c0ac6a990d87975600a81f3247ehttps://git.kernel.org/stable/c/81de2ed06df8b5451e050fe6a318af3263dbff3fhttps://git.kernel.org/stable/c/b4f7a9fc9d094c0c4a66f2ad7c37b1dbe9e78f88https://git.kernel.org/stable/c/c3b26fdf1b32f91c7a3bc743384b4a298ab53ad7https://git.kernel.org/stable/c/f12554b0ff639e74612cc01b3b4a049e098d2d65https://git.kernel.org/stable/c/f4e6a7f19c82f39b1803e91c54718f0d7143767d
2024-05-21
Published