7.8

CVE-2021-47311

net: qcom/emac: fix UAF in emac_remove

In the Linux kernel, the following vulnerability has been resolved:

net: qcom/emac: fix UAF in emac_remove

adpt is netdev private data and it cannot be
used after free_netdev() call. Using adpt after free_netdev()
can cause UAF bug. Fix it by moving free_netdev() at the end of the
function.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.9 < 4.9.277
Linux ≫ Linux Kernel Version >= 4.10 < 4.14.241
Linux ≫ Linux Kernel Version >= 4.15 < 4.19.199
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.135
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.53
Linux ≫ Linux Kernel Version >= 5.11 < 5.13.5
Linux ≫ Linux Kernel Version5.14 Updaterc1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.161
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://git.kernel.org/stable/c/11e9d163d631198bb3eb41a677a61b499516c0f7
Patch
https://git.kernel.org/stable/c/2b70ca92847c619d6264c7372ef74fcbfd1e048c
Patch
https://git.kernel.org/stable/c/4d04a42b926e682140776e54188f4a44f1f01a81
Patch
https://git.kernel.org/stable/c/8a225a6e07a57a1538d53637cb3d82bd3e477839
Patch
https://git.kernel.org/stable/c/ad297cd2db8953e2202970e9504cab247b6c7cb4
Patch
https://git.kernel.org/stable/c/b1e091331920f8fbfc747dcbd16263fcd71abb2d
Patch
https://git.kernel.org/stable/c/b560521eca03d0a2db6093a5a632cbdd0a0cf833
Patch