CVE - CVE-2021-47459

CVE-ID
CVE-2021-47459	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv It will trigger UAF for rx_kref of j1939_priv as following. cpu0 cpu1 j1939_sk_bind(socket0, ndev0, ...) j1939_netdev_start j1939_sk_bind(socket1, ndev0, ...) j1939_netdev_start j1939_priv_set j1939_priv_get_by_ndev_locked j1939_jsk_add ..... j1939_netdev_stop kref_put_lock(&priv->rx_kref, ...) kref_get(&priv->rx_kref, ...) REFCOUNT_WARN("addition on 0;...") ==================================================== refcount_t: addition on 0; use-after-free. WARNING: CPU: 1 PID: 20874 at lib/refcount.c:25 refcount_warn_saturate+0x169/0x1e0 RIP: 0010:refcount_warn_saturate+0x169/0x1e0 Call Trace: j1939_netdev_start+0x68b/0x920 j1939_sk_bind+0x426/0xeb0 ? security_socket_bind+0x83/0xb0 The rx_kref's kref_get() and kref_put() should use j1939_netdev_lock to protect.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/6e8811707e2df0c6ba920f0cad3a3bca7b42132f URL:https://git.kernel.org/stable/c/6e8811707e2df0c6ba920f0cad3a3bca7b42132f MISC:https://git.kernel.org/stable/c/864e77771a24c877aaf53aee019f78619cbcd668 URL:https://git.kernel.org/stable/c/864e77771a24c877aaf53aee019f78619cbcd668 MISC:https://git.kernel.org/stable/c/a0e47d2833b4f65e6c799f28c6b636d36b8b936d URL:https://git.kernel.org/stable/c/a0e47d2833b4f65e6c799f28c6b636d36b8b936d MISC:https://git.kernel.org/stable/c/d9d52a3ebd284882f5562c88e55991add5d01586 URL:https://git.kernel.org/stable/c/d9d52a3ebd284882f5562c88e55991add5d01586
Assigning CNA
kernel.org
Date Record Created
20240522	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240522)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)