CVE-2021-47236

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47236
In the Linux kernel, the following vulnerability has been resolved: net: cdc_eem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in eem_tx_fixup(), if skb_copy_expand() failed, it return NULL, usbnet_start_xmit() will have no chance to free original skb. fix it by free orginal skb in eem_tx_fixup() first, then check skb clone status, if failed, return NULL to usbnet.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/05b2b9f7d24b5663d9b47427fe1555bdafd3ea02 Patch
https://git.kernel.org/stable/c/14184ec5c958b589ba934da7363a2877879204df Patch
https://git.kernel.org/stable/c/1bcacd6088d61c0ac6a990d87975600a81f3247e Patch
https://git.kernel.org/stable/c/81de2ed06df8b5451e050fe6a318af3263dbff3f Patch
https://git.kernel.org/stable/c/b4f7a9fc9d094c0c4a66f2ad7c37b1dbe9e78f88 Patch
https://git.kernel.org/stable/c/c3b26fdf1b32f91c7a3bc743384b4a298ab53ad7 Patch
https://git.kernel.org/stable/c/f12554b0ff639e74612cc01b3b4a049e098d2d65 Patch
https://git.kernel.org/stable/c/f4e6a7f19c82f39b1803e91c54718f0d7143767d Patch
https://git.kernel.org/stable/c/05b2b9f7d24b5663d9b47427fe1555bdafd3ea02 Patch
https://git.kernel.org/stable/c/14184ec5c958b589ba934da7363a2877879204df Patch
https://git.kernel.org/stable/c/1bcacd6088d61c0ac6a990d87975600a81f3247e Patch
https://git.kernel.org/stable/c/81de2ed06df8b5451e050fe6a318af3263dbff3f Patch
https://git.kernel.org/stable/c/b4f7a9fc9d094c0c4a66f2ad7c37b1dbe9e78f88 Patch
https://git.kernel.org/stable/c/c3b26fdf1b32f91c7a3bc743384b4a298ab53ad7 Patch
https://git.kernel.org/stable/c/f12554b0ff639e74612cc01b3b4a049e098d2d65 Patch
https://git.kernel.org/stable/c/f4e6a7f19c82f39b1803e91c54718f0d7143767d Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc6:*:*:*:*:*:*
History

29 Apr 2025, 19:44

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/05b2b9f7d24b5663d9b47427fe1555bdafd3ea02 - () https://git.kernel.org/stable/c/05b2b9f7d24b5663d9b47427fe1555bdafd3ea02 - Patch
References () https://git.kernel.org/stable/c/14184ec5c958b589ba934da7363a2877879204df - () https://git.kernel.org/stable/c/14184ec5c958b589ba934da7363a2877879204df - Patch
References () https://git.kernel.org/stable/c/1bcacd6088d61c0ac6a990d87975600a81f3247e - () https://git.kernel.org/stable/c/1bcacd6088d61c0ac6a990d87975600a81f3247e - Patch
References () https://git.kernel.org/stable/c/81de2ed06df8b5451e050fe6a318af3263dbff3f - () https://git.kernel.org/stable/c/81de2ed06df8b5451e050fe6a318af3263dbff3f - Patch
References () https://git.kernel.org/stable/c/b4f7a9fc9d094c0c4a66f2ad7c37b1dbe9e78f88 - () https://git.kernel.org/stable/c/b4f7a9fc9d094c0c4a66f2ad7c37b1dbe9e78f88 - Patch
References () https://git.kernel.org/stable/c/c3b26fdf1b32f91c7a3bc743384b4a298ab53ad7 - () https://git.kernel.org/stable/c/c3b26fdf1b32f91c7a3bc743384b4a298ab53ad7 - Patch
References () https://git.kernel.org/stable/c/f12554b0ff639e74612cc01b3b4a049e098d2d65 - () https://git.kernel.org/stable/c/f12554b0ff639e74612cc01b3b4a049e098d2d65 - Patch
References () https://git.kernel.org/stable/c/f4e6a7f19c82f39b1803e91c54718f0d7143767d - () https://git.kernel.org/stable/c/f4e6a7f19c82f39b1803e91c54718f0d7143767d - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/05b2b9f7d24b5663d9b47427fe1555bdafd3ea02 - () https://git.kernel.org/stable/c/05b2b9f7d24b5663d9b47427fe1555bdafd3ea02 -
References () https://git.kernel.org/stable/c/14184ec5c958b589ba934da7363a2877879204df - () https://git.kernel.org/stable/c/14184ec5c958b589ba934da7363a2877879204df -
References () https://git.kernel.org/stable/c/1bcacd6088d61c0ac6a990d87975600a81f3247e - () https://git.kernel.org/stable/c/1bcacd6088d61c0ac6a990d87975600a81f3247e -
References () https://git.kernel.org/stable/c/81de2ed06df8b5451e050fe6a318af3263dbff3f - () https://git.kernel.org/stable/c/81de2ed06df8b5451e050fe6a318af3263dbff3f -
References () https://git.kernel.org/stable/c/b4f7a9fc9d094c0c4a66f2ad7c37b1dbe9e78f88 - () https://git.kernel.org/stable/c/b4f7a9fc9d094c0c4a66f2ad7c37b1dbe9e78f88 -
References () https://git.kernel.org/stable/c/c3b26fdf1b32f91c7a3bc743384b4a298ab53ad7 - () https://git.kernel.org/stable/c/c3b26fdf1b32f91c7a3bc743384b4a298ab53ad7 -
References () https://git.kernel.org/stable/c/f12554b0ff639e74612cc01b3b4a049e098d2d65 - () https://git.kernel.org/stable/c/f12554b0ff639e74612cc01b3b4a049e098d2d65 -
References () https://git.kernel.org/stable/c/f4e6a7f19c82f39b1803e91c54718f0d7143767d - () https://git.kernel.org/stable/c/f4e6a7f19c82f39b1803e91c54718f0d7143767d -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: cdc_eem: corrige la fuga de skb de reparación de tx cuando usbnet transmite un skb, eem lo repara en eem_tx_fixup(), si skb_copy_expand() falla, devuelve NULL, usbnet_start_xmit() No tendrá posibilidad de liberar el skb original. solucionelo primero con skb original gratuito en eem_tx_fixup(), luego verifique el estado del clon de skb, si falla, devuelva NULL a usbnet.

21 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 15:15

Updated : 2025-04-29 19:44

NVD link : CVE-2021-47236

Mitre link : CVE-2021-47236

CVE.ORG link : CVE-2021-47236

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime