CVE - CVE-2021-47013

CVE-ID
CVE-2021-47013	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send In emac_mac_tx_buf_send, it calls emac_tx_fill_tpd(..,skb,..). If some error happens in emac_tx_fill_tpd(), the skb will be freed via dev_kfree_skb(skb) in error branch of emac_tx_fill_tpd(). But the freed skb is still used via skb->len by netdev_sent_queue(,skb->len). As i observed that emac_tx_fill_tpd() haven't modified the value of skb->len, thus my patch assigns skb->len to 'len' before the possible free and use 'len' instead of skb->len later.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/16d8c44be52e3650917736d45f5904384a9da834 URL:https://git.kernel.org/stable/c/16d8c44be52e3650917736d45f5904384a9da834 MISC:https://git.kernel.org/stable/c/55fcdd1258faaecca74b91b88cc0921f9edd775d URL:https://git.kernel.org/stable/c/55fcdd1258faaecca74b91b88cc0921f9edd775d MISC:https://git.kernel.org/stable/c/6d72e7c767acbbdd44ebc7d89c6690b405b32b57 URL:https://git.kernel.org/stable/c/6d72e7c767acbbdd44ebc7d89c6690b405b32b57 MISC:https://git.kernel.org/stable/c/8c06f34785068b87e2b560534c77c163d6c6dca7 URL:https://git.kernel.org/stable/c/8c06f34785068b87e2b560534c77c163d6c6dca7 MISC:https://git.kernel.org/stable/c/9dc373f74097edd0e35f3393d6248eda8d1ba99d URL:https://git.kernel.org/stable/c/9dc373f74097edd0e35f3393d6248eda8d1ba99d MISC:https://git.kernel.org/stable/c/c7f75d11fe72913d2619f97b2334b083cd7bb955 URL:https://git.kernel.org/stable/c/c7f75d11fe72913d2619f97b2334b083cd7bb955 MISC:https://git.kernel.org/stable/c/dc1b438a35773d030be0ee80d9c635c3e558a322 URL:https://git.kernel.org/stable/c/dc1b438a35773d030be0ee80d9c635c3e558a322 MISC:https://git.kernel.org/stable/c/e407495ba6788a67d1bd41714158c079e340879b URL:https://git.kernel.org/stable/c/e407495ba6788a67d1bd41714158c079e340879b
Assigning CNA
kernel.org
Date Record Created
20240227	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240227)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)