CVE-2021-47669
- Source
- https://cve.org/CVERecord?id=CVE-2021-47669
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-47669.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2021-47669
- Downstream
- Related
- Published
- 2025-04-17T18:15:43.730Z
- Modified
- 2026-03-11T13:50:54.995631Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
can: vxcan: vxcan_xmit: fix use after free bug
After calling netifrxni(skb), dereferencing skb is unsafe. Especially, the canfdframe cfd which aliases skb memory is accessed after the netifrx_ni().
- References
-
- https://git.kernel.org/stable/c/e771a874076115df8bff27d325edfd2340e4ec69
- https://git.kernel.org/stable/c/6d6dcf2399cdd26f7f5426ca8dd8366b7f2ca105
- https://git.kernel.org/stable/c/75854cad5d80976f6ea0f0431f8cedd3bcc475cb
- https://git.kernel.org/stable/c/9b820875a32a3443d67bfd368e93038354e98052
- https://git.kernel.org/stable/c/a24476b37167816e6352ca1a2cf3769847774f70
Affected packages
Git /
Database specific
source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-47669.json"
unresolved_ranges
[
{
"events": [
{
"introduced": "4.12"
},
{
"fixed": "4.14.218"
}
]
},
{
"events": [
{
"introduced": "4.15"
},
{
"fixed": "4.19.171"
}
]
},
{
"events": [
{
"introduced": "4.20"
},
{
"fixed": "5.4.93"
}
]
},
{
"events": [
{
"introduced": "5.5"
},
{
"fixed": "5.10.11"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.11-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.11-rc2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.11-rc3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.11-rc4"
}
]
}
]