CVE - CVE-2021-47232

CVE-ID
CVE-2021-47232	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: can: j1939: fix Use-after-Free, hold skb ref while in use This patch fixes a Use-after-Free found by the syzbot. The problem is that a skb is taken from the per-session skb queue, without incrementing the ref count. This leads to a Use-after-Free if the skb is taken concurrently from the session queue due to a CTS.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/1071065eeb33d32b7d98c2ce7591881ae7381705 URL:https://git.kernel.org/stable/c/1071065eeb33d32b7d98c2ce7591881ae7381705 MISC:https://git.kernel.org/stable/c/2030043e616cab40f510299f09b636285e0a3678 URL:https://git.kernel.org/stable/c/2030043e616cab40f510299f09b636285e0a3678 MISC:https://git.kernel.org/stable/c/22cba878abf646cd3a02ee7c8c2cef7afe66a256 URL:https://git.kernel.org/stable/c/22cba878abf646cd3a02ee7c8c2cef7afe66a256 MISC:https://git.kernel.org/stable/c/509ab6bfdd0c76daebbad0f0af07da712116de22 URL:https://git.kernel.org/stable/c/509ab6bfdd0c76daebbad0f0af07da712116de22
Assigning CNA
kernel.org
Date Record Created
20240410	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240410)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)