CVE-2021-47669

can: vxcan: vxcan_xmit: fix use after free bug

State: Published
Severity: 7.8 High
Published: Apr 17, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

can: vxcan: vxcan_xmit: fix use after free bug

After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the canfd_frame cfd which aliases skb memory is accessed after the netif_rx_ni().

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	a8f820a380a2a06fc4fe1a54159067958f800929 to before 6d6dcf2399cdd26f7f5426ca8dd8366b7f2ca105Affected a8f820a380a2a06fc4fe1a54159067958f800929 to before 9b820875a32a3443d67bfd368e93038354e98052Affected a8f820a380a2a06fc4fe1a54159067958f800929 to before a24476b37167816e6352ca1a2cf3769847774f70Affected a8f820a380a2a06fc4fe1a54159067958f800929 to before e771a874076115df8bff27d325edfd2340e4ec69Affected a8f820a380a2a06fc4fe1a54159067958f800929 to before 75854cad5d80976f6ea0f0431f8cedd3bcc475cbAffected
LinuxLinux	4.12Affected before 4.12Not affected 4.14.218 through 4.14.Not affected 4.19.171 through 4.19.Not affected 5.4.93 through 5.4.Not affected 5.10.11 through 5.10.Not affected 5.11 and laterNot affected

Product

Versions

LinuxLinux

a8f820a380a2a06fc4fe1a54159067958f800929 to before 6d6dcf2399cdd26f7f5426ca8dd8366b7f2ca105Affected
a8f820a380a2a06fc4fe1a54159067958f800929 to before 9b820875a32a3443d67bfd368e93038354e98052Affected
a8f820a380a2a06fc4fe1a54159067958f800929 to before a24476b37167816e6352ca1a2cf3769847774f70Affected
a8f820a380a2a06fc4fe1a54159067958f800929 to before e771a874076115df8bff27d325edfd2340e4ec69Affected
a8f820a380a2a06fc4fe1a54159067958f800929 to before 75854cad5d80976f6ea0f0431f8cedd3bcc475cbAffected

LinuxLinux

4.12Affected
before 4.12Not affected
4.14.218 through 4.14.*Not affected
4.19.171 through 4.19.*Not affected
5.4.93 through 5.4.*Not affected
5.10.11 through 5.10.*Not affected
5.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.