Riskcovery

CVE-2021-47306

net: fddi: fix UAF in fza_probe

State
Published
Severity
Not scored
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: fddi: fix UAF in fza_probe

fp is netdev private data and it cannot be used after free_netdev() call. Using fp after free_netdev() can cause UAF bug. Fix it by moving free_netdev() after error message.

TURBOchannel adapter")

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 61414f5ec9834df8aa4f55c90de16b71a3d6ca8d to before 04b06716838bfc26742dbed3ae1d3697fe5317eeAffected
  • 61414f5ec9834df8aa4f55c90de16b71a3d6ca8d to before f33605908a9b6063525e9f68e62d739948c5fccfAffected
  • 61414f5ec9834df8aa4f55c90de16b71a3d6ca8d to before bdfbb51f7a437ae8ea91317a5c133ec13adf3c47Affected
  • 61414f5ec9834df8aa4f55c90de16b71a3d6ca8d to before deb7178eb940e2c5caca1b1db084a69b2e59b4c9Affected
LinuxLinux
  • 4.20Affected
  • before 4.20Not affected
  • 5.4.135 through 5.4.*Not affected
  • 5.10.53 through 5.10.*Not affected
  • 5.13.5 through 5.13.*Not affected
  • 5.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.