CVE-2021-47306 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: net: fddi: fix UAF in fza_probe fp is netdev private data and it cannot be used after free_netdev() call. Using fp after free_netdev() can cause UAF bug. Fix it by moving free_netdev() after error message. TURBOchannel adapter")

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/04b06716838bfc26742dbed3ae1d3697fe5317ee
https://git.kernel.org/stable/c/bdfbb51f7a437ae8ea91317a5c133ec13adf3c47
https://git.kernel.org/stable/c/deb7178eb940e2c5caca1b1db084a69b2e59b4c9
https://git.kernel.org/stable/c/f33605908a9b6063525e9f68e62d739948c5fccf
https://lore.kernel.org/linux-cve-announce/2024052127-CVE-2021-47306-2af7@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2021-47306
https://www.cve.org/CVERecord?id=CVE-2021-47306

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T14:35:26.005Z

Updated: 2024-11-04T12:03:22.966Z

Reserved: 2024-05-21T13:27:52.133Z

Link: CVE-2021-47306

Vulnrichment

Updated: 2024-08-04T05:32:08.444Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T15:15:18.250

Modified: 2024-05-21T16:54:26.047

Link: CVE-2021-47306

Redhat

Severity : Moderate

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2021-47306 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47306", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T13:27:52.133Z", "datePublished": "2024-05-21T14:35:26.005Z", "dateUpdated": "2024-11-04T12:03:22.966Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T12:03:22.966Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fddi: fix UAF in fza_probe\n\nfp is netdev private data and it cannot be\nused after free_netdev() call. Using fp after free_netdev()\ncan cause UAF bug. Fix it by moving free_netdev() after error message.\n\nTURBOchannel adapter\")"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/fddi/defza.c"], "versions": [{"version": "61414f5ec983", "lessThan": "04b06716838b", "status": "affected", "versionType": "git"}, {"version": "61414f5ec983", "lessThan": "f33605908a9b", "status": "affected", "versionType": "git"}, {"version": "61414f5ec983", "lessThan": "bdfbb51f7a43", "status": "affected", "versionType": "git"}, {"version": "61414f5ec983", "lessThan": "deb7178eb940", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/fddi/defza.c"], "versions": [{"version": "4.20", "status": "affected"}, {"version": "0", "lessThan": "4.20", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.135", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.53", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.13.5", "lessThanOrEqual": "5.13.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.14", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/04b06716838bfc26742dbed3ae1d3697fe5317ee"}, {"url": "https://git.kernel.org/stable/c/f33605908a9b6063525e9f68e62d739948c5fccf"}, {"url": "https://git.kernel.org/stable/c/bdfbb51f7a437ae8ea91317a5c133ec13adf3c47"}, {"url": "https://git.kernel.org/stable/c/deb7178eb940e2c5caca1b1db084a69b2e59b4c9"}], "title": "net: fddi: fix UAF in fza_probe", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47306", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-28T15:52:18.778665Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:14:18.861Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:32:08.444Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/04b06716838bfc26742dbed3ae1d3697fe5317ee", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f33605908a9b6063525e9f68e62d739948c5fccf", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/bdfbb51f7a437ae8ea91317a5c133ec13adf3c47", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/deb7178eb940e2c5caca1b1db084a69b2e59b4c9", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/04b06716838bfc26742dbed3ae1d3697fe5317ee", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f33605908a9b6063525e9f68e62d739948c5fccf", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/bdfbb51f7a437ae8ea91317a5c133ec13adf3c47", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/deb7178eb940e2c5caca1b1db084a69b2e59b4c9", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:32:08.444Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47306", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-28T15:52:18.778665Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-28T15:52:24.053Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "net: fddi: fix UAF in fza_probe", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "61414f5ec983", "lessThan": "04b06716838b", "versionType": "git"}, {"status": "affected", "version": "61414f5ec983", "lessThan": "f33605908a9b", "versionType": "git"}, {"status": "affected", "version": "61414f5ec983", "lessThan": "bdfbb51f7a43", "versionType": "git"}, {"status": "affected", "version": "61414f5ec983", "lessThan": "deb7178eb940", "versionType": "git"}], "programFiles": ["drivers/net/fddi/defza.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.20"}, {"status": "unaffected", "version": "0", "lessThan": "4.20", "versionType": "custom"}, {"status": "unaffected", "version": "5.4.135", "versionType": "custom", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.53", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.13.5", "versionType": "custom", "lessThanOrEqual": "5.13.*"}, {"status": "unaffected", "version": "5.14", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/fddi/defza.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/04b06716838bfc26742dbed3ae1d3697fe5317ee"}, {"url": "https://git.kernel.org/stable/c/f33605908a9b6063525e9f68e62d739948c5fccf"}, {"url": "https://git.kernel.org/stable/c/bdfbb51f7a437ae8ea91317a5c133ec13adf3c47"}, {"url": "https://git.kernel.org/stable/c/deb7178eb940e2c5caca1b1db084a69b2e59b4c9"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fddi: fix UAF in fza_probe\n\nfp is netdev private data and it cannot be\nused after free_netdev() call. Using fp after free_netdev()\ncan cause UAF bug. Fix it by moving free_netdev() after error message.\n\nTURBOchannel adapter\")"}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:05:39.727Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47306", "state": "PUBLISHED", "dateUpdated": "2024-08-04T05:32:08.444Z", "dateReserved": "2024-05-21T13:27:52.133Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-21T14:35:26.005Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"bugzilla": {"description": "kernel: net: fddi: fix UAF in fza_probe", "id": "2282476", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282476"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-416", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnet: fddi: fix UAF in fza_probe\nfp is netdev private data and it cannot be\nused after free_netdev() call. Using fp after free_netdev()\ncan cause UAF bug. Fix it by moving free_netdev() after error message.\nTURBOchannel adapter\")", "A vulnerability was found in the fza_probe function in the Linux kernel's FDDI driver. Private data might be used after it has been freed, leading to an use-after-free issue, causing system instability or crashes if the freed data is accessed."], "mitigation": {"lang": "en:us", "value": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible."}, "name": "CVE-2021-47306", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-05-21T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-47306\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-47306\nhttps://lore.kernel.org/linux-cve-announce/2024052127-CVE-2021-47306-2af7@gregkh/T"], "statement": "This vulnerability is rated as a moderate because this issue does not directly expose sensitive information.", "threat_severity": "Moderate", "upstream_fix": "kernel 5.4.135, kernel 5.10.53, kernel 5.13.5, kernel 5.14"}