CVE-2021-47310

net: ti: fix UAF in tlan_remove_one

State
Published
Severity
Not scored
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ti: fix UAF in tlan_remove_one

priv is netdev private data and it cannot be used after free_netdev() call. Using priv after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa to before a18a8d9cfbb112ad72e625372849adc3986fd6bfAffected
  • 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa to before c263ae8c7e4c482387de5e6c89e213f8173fe8b6Affected
  • 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa to before 0538b0ab7d2c396e385694228c7cdcd2d2c514e9Affected
  • 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa to before a0a817b2d308fac090a05cbbe80988e073ac5193Affected
  • 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa to before b7e5563f2a7862a9e4796abb9908b092f677e3c1Affected
  • 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa to before f2a062fcfe1d6f1b0a86fa76ae21c277d65f4405Affected
  • 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa to before 93efab0ef2a607fff9166d447c4035f98b5db342Affected
  • 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa to before 0336f8ffece62f882ab3012820965a786a983f70Affected
LinuxLinux
  • 3.10Affected
  • before 3.10Not affected
  • 4.4.277 through 4.4.*Not affected
  • 4.9.277 through 4.9.*Not affected
  • 4.14.241 through 4.14.*Not affected
  • 4.19.199 through 4.19.*Not affected
  • 5.4.135 through 5.4.*Not affected
  • 5.10.53 through 5.10.*Not affected
  • 5.13.5 through 5.13.*Not affected
  • 5.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.