CVE-2021-47232

CriticalCVSS 9.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

can: j1939: fix Use-after-Free, hold skb ref while in use

This patch fixes a Use-after-Free found by the syzbot.

The problem is that a skb is taken from the per-session skb queue, without incrementing the ref count. This leads to a Use-after-Free if the skb is taken concurrently from the session queue due to a CTS.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= 9d71dd0c70099914fcd063135da3c580865e924c, < 22cba878abf646cd3a02ee7c8c2cef7afe66a256; >= 9d71dd0c70099914fcd063135da3c580865e924c, < 509ab6bfdd0c76daebbad0f0af07da712116de22; >= 9d71dd0c70099914fcd063135da3c580865e924c, < 1071065eeb33d32b7d98c2ce7591881ae7381705; >= 9d71dd0c70099914fcd063135da3c580865e924c, < 2030043e616cab40f510299f09b636285e0a3678
LinuxLinux5.4
linuxlinux_kernel>= 9d71dd0c7009, < 22cba878abf6
linuxlinux_kernel>= 9d71dd0c7009, < 509ab6bfdd0c
linuxlinux_kernel>= 9d71dd0c7009, < 1071065eeb33
linuxlinux_kernel>= 9d71dd0c7009, < 2030043e616c
linuxlinux_kernel—
linuxlinux_kernel—
linuxlinux_kernel—
linuxlinux_kernel—
linuxlinux_kernel—
linuxlinux_kernel5.4

References

Timeline

Published
May 21, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-472335.5In the Linux kernel, the following vulnerability has been resolved: regulator: rt4801: Fix NULL pointer dereference if priv->enable_gpios iCVE-2021-472345.5In the Linux kernel, the following vulnerability has been resolved: phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init() Use clk_dCVE-2021-472357.8In the Linux kernel, the following vulnerability has been resolved: net: ethernet: fix potential use-after-free in ec_bhf_remove static voCVE-2021-472365.5In the Linux kernel, the following vulnerability has been resolved: net: cdc_eem: fix tx fixup skb leak when usbnet transmit a skb, eem fiCVE-2021-472375.5In the Linux kernel, the following vulnerability has been resolved: net: hamradio: fix memory leak in mkiss_close My local syzbot instanceCVE-2021-472385.5In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix memory leak in ip_mc_add1_src BUG: memory leak unrefereCVE-2021-472397.8In the Linux kernel, the following vulnerability has been resolved: net: usb: fix possible use-after-free in smsc75xx_bind The commit 46a8CVE-2021-472407.1In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix OOB Read in qrtr_endpoint_post Syzbot reported slab-outCVE-2021-472417.5In the Linux kernel, the following vulnerability has been resolved: ethtool: strset: fix message length calculation Outer nest for ETHTOOLCVE-2021-472427.5In the Linux kernel, the following vulnerability has been resolved: mptcp: fix soft lookup in subflow_error_report() Maxim reported a softCVE-2021-472437.1In the Linux kernel, the following vulnerability has been resolved: sch_cake: Fix out of bounds when parsing TCP options and header The TCCVE-2021-472448.2In the Linux kernel, the following vulnerability has been resolved: mptcp: Fix out of bounds when parsing TCP options The TCP option parse
CVE-2021-47232: Critical severity, CVSS 9.8 | Vulnix