CVE-2021-47670

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use after free bug has been identified in the Linux kernel, specifically in the peak usb component. The issue arises after calling the peak usb netif rx ni() function with the skb variable, as dereferencing skb becomes unsafe. This is particularly problematic when accessing the can frame cf which shares memory with skb after the peak usb netif rx ni() call. Reordering the lines of code resolves the issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.