CVE - CVE-2021-47235

CVE-ID
CVE-2021-47235	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: fix potential use-after-free in ec_bhf_remove static void ec_bhf_remove(struct pci_dev dev) { ... struct ec_bhf_priv priv = netdev_priv(net_dev); unregister_netdev(net_dev); free_netdev(net_dev); pci_iounmap(dev, priv->dma_io); pci_iounmap(dev, priv->io); ... } priv is netdev private data, but it is used after free_netdev(). It can cause use-after-free when accessing priv pointer. So, fix it by moving free_netdev() after pci_iounmap() calls.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0260916843cc74f3906acf8b6f256693e01530a2 URL:https://git.kernel.org/stable/c/0260916843cc74f3906acf8b6f256693e01530a2 MISC:https://git.kernel.org/stable/c/19f88ca68ccf8771276a606765239b167654f84a URL:https://git.kernel.org/stable/c/19f88ca68ccf8771276a606765239b167654f84a MISC:https://git.kernel.org/stable/c/1cafc540b7bf1b6a5a77dc000205fe337ef6eba6 URL:https://git.kernel.org/stable/c/1cafc540b7bf1b6a5a77dc000205fe337ef6eba6 MISC:https://git.kernel.org/stable/c/95deeb29d831e2fae608439e243e7a520611e7ea URL:https://git.kernel.org/stable/c/95deeb29d831e2fae608439e243e7a520611e7ea MISC:https://git.kernel.org/stable/c/9cca0c2d70149160407bda9a9446ce0c29b6e6c6 URL:https://git.kernel.org/stable/c/9cca0c2d70149160407bda9a9446ce0c29b6e6c6 MISC:https://git.kernel.org/stable/c/b1ad283755095a4b9d1431aeb357d7df1a33d3bb URL:https://git.kernel.org/stable/c/b1ad283755095a4b9d1431aeb357d7df1a33d3bb MISC:https://git.kernel.org/stable/c/d11d79e52ba080ee567cb7d7eb42a5ade60a8130 URL:https://git.kernel.org/stable/c/d11d79e52ba080ee567cb7d7eb42a5ade60a8130 MISC:https://git.kernel.org/stable/c/db2bc3cfd2bc01621014d4f17cdfc74611f339c8 URL:https://git.kernel.org/stable/c/db2bc3cfd2bc01621014d4f17cdfc74611f339c8
Assigning CNA
kernel.org
Date Record Created
20240410	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240410)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)