In the Linux kernel, the following vulnerability has been resolved: can: vxcan: vxcan_xmit: fix use after free bug After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the canfd_frame cfd which aliases skb memory is accessed after the netif_rx_ni().

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.11:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.11:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.11:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.11:rc4:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/6d6dcf2399cdd26f7f5426ca8dd8366b7f2ca105 cve-icon cve-icon
https://git.kernel.org/stable/c/75854cad5d80976f6ea0f0431f8cedd3bcc475cb cve-icon cve-icon
https://git.kernel.org/stable/c/9b820875a32a3443d67bfd368e93038354e98052 cve-icon cve-icon
https://git.kernel.org/stable/c/a24476b37167816e6352ca1a2cf3769847774f70 cve-icon cve-icon
https://git.kernel.org/stable/c/e771a874076115df8bff27d325edfd2340e4ec69 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025041734-CVE-2021-47669-f268@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2021-47669 cve-icon
https://www.cve.org/CVERecord?id=CVE-2021-47669 cve-icon
History

Mon, 21 Apr 2025 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.11:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.11:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.11:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.11:rc4:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Sat, 19 Apr 2025 01:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Thu, 17 Apr 2025 19:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 17 Apr 2025 18:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: can: vxcan: vxcan_xmit: fix use after free bug After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the canfd_frame cfd which aliases skb memory is accessed after the netif_rx_ni().
Title can: vxcan: vxcan_xmit: fix use after free bug
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-04-17T18:01:29.979Z

Updated: 2025-04-17T18:25:25.277Z

Reserved: 2025-04-16T07:16:05.752Z

Link: CVE-2021-47669

cve-icon Vulnrichment

Updated: 2025-04-17T18:17:53.914Z

cve-icon NVD

Status : Analyzed

Published: 2025-04-17T18:15:43.730

Modified: 2025-04-21T18:41:22.637

Link: CVE-2021-47669

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-04-17T00:00:00Z

Links: CVE-2021-47669 - Bugzilla