In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: fix potential use-after-free in ec_bhf_remove
static void ec_bhf_remove(struct pci_dev *dev)
{
...
struct ec_bhf_priv *priv = netdev_priv(net_dev);
unregister_netdev(net_dev);
free_netdev(net_dev);
pci_iounmap(dev, priv->dma_io);
pci_iounmap(dev, priv->io);
...
}
priv is netdev private data, but it is used
after free_netdev(). It can cause use-after-free when accessing priv
pointer. So, fix it by moving free_netdev() after pci_iounmap()
calls.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2024-05-21 15:15
Updated : 2024-12-30 19:06
NVD link : CVE-2021-47235
Mitre link : CVE-2021-47235
CVE.ORG link : CVE-2021-47235
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-416
Use After Free