Total vulnerabilities in the database
In the Linux kernel, the following vulnerability has been resolved:
can: dev: can_restart: fix use after free bug
After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is accessed after the netif_rx_ni() in: stats->rx_bytes += cf->len;
Reordering the lines solves the issue.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 5.11-rc3 | 5.11-rc3.x |
| linux / linux_kernel | 5.11-rc2 | 5.11-rc2.x |
| linux / linux_kernel | 5.11-rc1 | 5.11-rc1.x |
| linux / linux_kernel | 5.11-rc4 | 5.11-rc4.x |
| linux / linux_kernel | 2.6.31 | 4.4.254 |
| linux / linux_kernel | 4.10 | 4.14.218 |
| linux / linux_kernel | 4.5 | 4.9.254 |
| linux / linux_kernel | 4.15 | 4.19.171 |
| linux / linux_kernel | 4.20 | 5.4.93 |
| linux / linux_kernel | 5.5 | 5.10.11 |