CVE-2021-47013
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2021
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
In the Linux kernel, the following vulnerability has been resolved: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send In emac_mac_tx_buf_send, it calls emac_tx_fill_tpd(..,skb,..). If some error happens in emac_tx_fill_tpd(), the skb will be freed via dev_kfree_skb(skb) in error branch of emac_tx_fill_tpd(). But the freed skb is still used via skb->len by netdev_sent_queue(,skb->len). As i observed that emac_tx_fill_tpd() haven't modified the value of skb->len, thus my patch assigns skb->len to 'len' before the possible free and use 'len' instead of skb->len later.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| b9b17debc69d27cd55e21ee51a5ba7fc50a426cf | affected | git | c7f75d11fe72913d2619f97b2334b083cd7bb955 | Unavailable | None listed |
| b9b17debc69d27cd55e21ee51a5ba7fc50a426cf | affected | git | dc1b438a35773d030be0ee80d9c635c3e558a322 | Unavailable | None listed |
| b9b17debc69d27cd55e21ee51a5ba7fc50a426cf | affected | git | 16d8c44be52e3650917736d45f5904384a9da834 | Unavailable | None listed |
| b9b17debc69d27cd55e21ee51a5ba7fc50a426cf | affected | git | 55fcdd1258faaecca74b91b88cc0921f9edd775d | Unavailable | None listed |
| b9b17debc69d27cd55e21ee51a5ba7fc50a426cf | affected | git | 9dc373f74097edd0e35f3393d6248eda8d1ba99d | Unavailable | None listed |
| b9b17debc69d27cd55e21ee51a5ba7fc50a426cf | affected | git | 8c06f34785068b87e2b560534c77c163d6c6dca7 | Unavailable | None listed |
| b9b17debc69d27cd55e21ee51a5ba7fc50a426cf | affected | git | e407495ba6788a67d1bd41714158c079e340879b | Unavailable | None listed |
| b9b17debc69d27cd55e21ee51a5ba7fc50a426cf | affected | git | 6d72e7c767acbbdd44ebc7d89c6690b405b32b57 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.9 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 4.9 | Unavailable | None listed |
| 4.9.269 | unaffected | semver | Unavailable | 4.9.* | None listed |
| 4.14.233 | unaffected | semver | Unavailable | 4.14.* | None listed |
| 4.19.191 | unaffected | semver | Unavailable | 4.19.* | None listed |
| 5.4.119 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.37 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.11.21 | unaffected | semver | Unavailable | 5.11.* | None listed |
| 5.12.4 | unaffected | semver | Unavailable | 5.12.* | None listed |
| 5.13 | unaffected | original_commit_for_fix | Unavailable | * | None listed |