CVE-2021-47310
published 2024-05-21CVE-2021-47310: In the Linux kernel, the following vulnerability has been resolved: net: ti: fix UAF in tlan_remove_one priv is netdev private data and it cannot be used after…
PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.25%
16.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: ti: fix UAF in tlan_remove_one
priv is netdev private data and it cannot be
used after free_netdev() call. Using priv after free_netdev()
can cause UAF bug. Fix it by moving free_netdev() at the end of the
function.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.14.6-1 (bookworm) | linux 5.14.6-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa < a18a8d9cfbb112ad72e625372849adc3986fd6bf | a18a8d9cfbb112ad72e625372849adc3986fd6bf |
| linux | linux | >= 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa < c263ae8c7e4c482387de5e6c89e213f8173fe8b6 | c263ae8c7e4c482387de5e6c89e213f8173fe8b6 |
| linux | linux | >= 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa < 0538b0ab7d2c396e385694228c7cdcd2d2c514e9 | 0538b0ab7d2c396e385694228c7cdcd2d2c514e9 |
| linux | linux | >= 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa < a0a817b2d308fac090a05cbbe80988e073ac5193 | a0a817b2d308fac090a05cbbe80988e073ac5193 |
| linux | linux | >= 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa < b7e5563f2a7862a9e4796abb9908b092f677e3c1 | b7e5563f2a7862a9e4796abb9908b092f677e3c1 |
| linux | linux | >= 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa < f2a062fcfe1d6f1b0a86fa76ae21c277d65f4405 | f2a062fcfe1d6f1b0a86fa76ae21c277d65f4405 |
| linux | linux | >= 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa < 93efab0ef2a607fff9166d447c4035f98b5db342 | 93efab0ef2a607fff9166d447c4035f98b5db342 |
| linux | linux | >= 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa < 0336f8ffece62f882ab3012820965a786a983f70 | 0336f8ffece62f882ab3012820965a786a983f70 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.70-1 | 5.10.70-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 3.10 < 4.4.277 | 4.4.277 |
| linux | linux_kernel | >= 4.10 < 4.14.241 | 4.14.241 |
| linux | linux_kernel | >= 4.15 < 4.19.199 | 4.19.199 |
| linux | linux_kernel | >= 4.20 < 5.4.135 | 5.4.135 |
| linux | linux_kernel | >= 4.5 < 4.9.277 | 4.9.277 |
| linux | linux_kernel | >= 5.11 < 5.13.5 | 5.13.5 |
| linux | linux_kernel | >= 5.5 < 5.10.53 | 5.10.53 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: net: ti: fix UAF in tlan_remove_one
vendor_redhat·2024-05-21·CVSS 7.8
CVE-2021-47310 [HIGH] CWE-416 kernel: net: ti: fix UAF in tlan_remove_one
kernel: net: ti: fix UAF in tlan_remove_one
In the Linux kernel, the following vulnerability has been resolved:
net: ti: fix UAF in tlan_remove_one
priv is netdev private data and it cannot be
used after free_netdev() call. Using priv after free_netdev()
can cause UAF bug. Fix it by moving free_netdev() at the end of the
function.
A vulnerability was found in the Linux kernel's TI TLAN driver, where the tlan_remove_one function can lead to a use-after-free issue when the driver attempts to access private data after the network device has already been freed, potentially causing system instability or crash.
Statement: This vulnerability is rated as a moderate because the use-after-free can disrupt network functionality, resulting in service interruptions, but it does not directly compromi
Debian
CVE-2021-47310: linux - In the Linux kernel, the following vulnerability has been resolved: net: ti: fi...
vendor_debian·2021·CVSS 7.8
CVE-2021-47310 [HIGH] CVE-2021-47310: linux - In the Linux kernel, the following vulnerability has been resolved: net: ti: fi...
In the Linux kernel, the following vulnerability has been resolved: net: ti: fix UAF in tlan_remove_one priv is netdev private data and it cannot be used after free_netdev() call. Using priv after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function.
Scope: local
bookworm: resolved (fixed in 5.14.6-1)
bullseye: resolved (fixed in 5.10.70-1)
forky: resolved (fixed in 5.14.6-1)
sid: resolved (fixed in 5.14.6-1)
trixie: resolved (fixed in 5.14.6-1)
OSV
CVE-2021-47310: In the Linux kernel, the following vulnerability has been resolved: net: ti: fix UAF in tlan_remove_one priv is netdev private data and it cannot be u
osv·2024-05-21·CVSS 7.8
CVE-2021-47310 [HIGH] CVE-2021-47310: In the Linux kernel, the following vulnerability has been resolved: net: ti: fix UAF in tlan_remove_one priv is netdev private data and it cannot be u
In the Linux kernel, the following vulnerability has been resolved: net: ti: fix UAF in tlan_remove_one priv is netdev private data and it cannot be used after free_netdev() call. Using priv after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function.
GHSA
GHSA-589w-2j5c-px7j: In the Linux kernel, the following vulnerability has been resolved:
net: ti: fix UAF in tlan_remove_one
priv is netdev private data and it cannot be
ghsa_unreviewed·2024-05-21
CVE-2021-47310 [HIGH] CWE-416 GHSA-589w-2j5c-px7j: In the Linux kernel, the following vulnerability has been resolved:
net: ti: fix UAF in tlan_remove_one
priv is netdev private data and it cannot be
In the Linux kernel, the following vulnerability has been resolved:
net: ti: fix UAF in tlan_remove_one
priv is netdev private data and it cannot be
used after free_netdev() call. Using priv after free_netdev()
can cause UAF bug. Fix it by moving free_netdev() at the end of the
function.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0336f8ffece62f882ab3012820965a786a983f70https://git.kernel.org/stable/c/0538b0ab7d2c396e385694228c7cdcd2d2c514e9https://git.kernel.org/stable/c/93efab0ef2a607fff9166d447c4035f98b5db342https://git.kernel.org/stable/c/a0a817b2d308fac090a05cbbe80988e073ac5193https://git.kernel.org/stable/c/a18a8d9cfbb112ad72e625372849adc3986fd6bfhttps://git.kernel.org/stable/c/b7e5563f2a7862a9e4796abb9908b092f677e3c1https://git.kernel.org/stable/c/c263ae8c7e4c482387de5e6c89e213f8173fe8b6https://git.kernel.org/stable/c/f2a062fcfe1d6f1b0a86fa76ae21c277d65f4405https://git.kernel.org/stable/c/0336f8ffece62f882ab3012820965a786a983f70https://git.kernel.org/stable/c/0538b0ab7d2c396e385694228c7cdcd2d2c514e9https://git.kernel.org/stable/c/93efab0ef2a607fff9166d447c4035f98b5db342https://git.kernel.org/stable/c/a0a817b2d308fac090a05cbbe80988e073ac5193https://git.kernel.org/stable/c/a18a8d9cfbb112ad72e625372849adc3986fd6bfhttps://git.kernel.org/stable/c/b7e5563f2a7862a9e4796abb9908b092f677e3c1https://git.kernel.org/stable/c/c263ae8c7e4c482387de5e6c89e213f8173fe8b6https://git.kernel.org/stable/c/f2a062fcfe1d6f1b0a86fa76ae21c277d65f4405
2024-05-21
Published