SECUFOCUSNOW
Home›CVE index›CVE-2021-47459
Review reviewHigh

CVE-2021-47459

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv It will trigger UAF for rx_kref of j1939_priv as following. cpu0 cpu1 j1939_sk_bind(socket0, ndev0, ...) j1939_netdev_start j1939_sk_bind(socket1, ndev0, ...) j1939_netdev_start j1939_priv_set j1939_priv_get_by_ndev_locked j1939_jsk_add ..... j1939_netdev_stop kref_put_lock(&priv->rx_kref, ...) kref_get(&priv->rx_kref, ...) REFCOUNT_WARN("addition on 0;...") ==================================================== refcount_t: addition on 0; use-after-free. WARN...

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2024.05.22
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv It will trigger UAF for rx_kref of j1939_priv as following. cpu0 cpu1 j1939_sk_bind(socket0, ndev0, ...) j1939_netdev_start j1939_sk_bind(socket1, ndev0, ...) j1939_netdev_start j1939_priv_set j1939_priv_get_by_ndev_locked j1939_jsk_add ..... j1939_netdev_stop kref_put_lock(&priv->rx_kref, ...) kref_get(&priv->rx_kref, ...) REFCOUNT_WARN("addition on 0;...") ==================================================== refcount_t: addition on 0; use-after-free. WARN...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 9d71dd0c70099914fcd063135da3c580865e924c < a0e47d2833b4f65e6c799f28c6b636d36b8b936d, >= 9d71dd0c70099914fcd063135da3c580865e924c < 864e77771a24c877aaf53aee019f78619cbcd668, >= 9d71dd0c70099914fcd063135da3c580865e924c < 6e8811707e2df0c6ba920f0cad3a3bca7b42132f, >= 9d71dd0c70099914fcd063135da3c580865e924c < d9d52a3ebd284882f5562c88e55991add5d01586, >= 5.4, >= 5.4 < 5.4.156, >= 5.5 < 5.10.76, >= 5.11 < 5.14.15, 5.15
Fixed versions
5.4.156, 5.10.76, 5.14.15

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416