CVE-2021-47236

net: cdc_eem: fix tx fixup skb leak

State: Published
Severity: Not scored
Published: May 21, 2024
Updated: May 11, 2026
Reserved: Apr 10, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: cdc_eem: fix tx fixup skb leak

when usbnet transmit a skb, eem fixup it in eem_tx_fixup(), if skb_copy_expand() failed, it return NULL, usbnet_start_xmit() will have no chance to free original skb.

fix it by free orginal skb in eem_tx_fixup() first, then check skb clone status, if failed, return NULL to usbnet.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9f722c0978b04acba209f8ca1896ad05814bc3a3 to before f12554b0ff639e74612cc01b3b4a049e098d2d65Affected 9f722c0978b04acba209f8ca1896ad05814bc3a3 to before 14184ec5c958b589ba934da7363a2877879204dfAffected 9f722c0978b04acba209f8ca1896ad05814bc3a3 to before 1bcacd6088d61c0ac6a990d87975600a81f3247eAffected 9f722c0978b04acba209f8ca1896ad05814bc3a3 to before f4e6a7f19c82f39b1803e91c54718f0d7143767dAffected 9f722c0978b04acba209f8ca1896ad05814bc3a3 to before 81de2ed06df8b5451e050fe6a318af3263dbff3fAffected 9f722c0978b04acba209f8ca1896ad05814bc3a3 to before 05b2b9f7d24b5663d9b47427fe1555bdafd3ea02Affected 9f722c0978b04acba209f8ca1896ad05814bc3a3 to before b4f7a9fc9d094c0c4a66f2ad7c37b1dbe9e78f88Affected 9f722c0978b04acba209f8ca1896ad05814bc3a3 to before c3b26fdf1b32f91c7a3bc743384b4a298ab53ad7Affected
LinuxLinux	2.6.30Affected before 2.6.30Not affected 4.4.274 through 4.4.Not affected 4.9.274 through 4.9.Not affected 4.14.238 through 4.14.Not affected 4.19.196 through 4.19.Not affected 5.4.128 through 5.4.Not affected 5.10.46 through 5.10.Not affected 5.12.13 through 5.12.*Not affected 5.13 and laterNot affected

Product

Versions

LinuxLinux

9f722c0978b04acba209f8ca1896ad05814bc3a3 to before f12554b0ff639e74612cc01b3b4a049e098d2d65Affected
9f722c0978b04acba209f8ca1896ad05814bc3a3 to before 14184ec5c958b589ba934da7363a2877879204dfAffected
9f722c0978b04acba209f8ca1896ad05814bc3a3 to before 1bcacd6088d61c0ac6a990d87975600a81f3247eAffected
9f722c0978b04acba209f8ca1896ad05814bc3a3 to before f4e6a7f19c82f39b1803e91c54718f0d7143767dAffected
9f722c0978b04acba209f8ca1896ad05814bc3a3 to before 81de2ed06df8b5451e050fe6a318af3263dbff3fAffected
9f722c0978b04acba209f8ca1896ad05814bc3a3 to before 05b2b9f7d24b5663d9b47427fe1555bdafd3ea02Affected
9f722c0978b04acba209f8ca1896ad05814bc3a3 to before b4f7a9fc9d094c0c4a66f2ad7c37b1dbe9e78f88Affected
9f722c0978b04acba209f8ca1896ad05814bc3a3 to before c3b26fdf1b32f91c7a3bc743384b4a298ab53ad7Affected

LinuxLinux

2.6.30Affected
before 2.6.30Not affected
4.4.274 through 4.4.*Not affected
4.9.274 through 4.9.*Not affected
4.14.238 through 4.14.*Not affected
4.19.196 through 4.19.*Not affected
5.4.128 through 5.4.*Not affected
5.10.46 through 5.10.*Not affected
5.12.13 through 5.12.*Not affected
5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.