CVE-2021-37159

תיאור (מקור, אנגלית)

hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.

מדדים

CVSS 3.1

6.4 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-415, CWE-416

מוצרים מושפעים

linux: linux kernel; debian: debian linux; oracle: communications cloud native core binding support function; oracle: communications cloud native core network exposure function; oracle: communications cloud native core policy

קישורים

• https://www.oracle.com/security-alerts/cpujul2022.html PatchThird Party Advisory
• https://www.spinics.net/lists/linux-usb/msg202228.html Mailing ListPatchThird Party Advisory
• https://www.oracle.com/security-alerts/cpujul2022.html PatchThird Party Advisory
• https://www.spinics.net/lists/linux-usb/msg202228.html Mailing ListPatchThird Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1188601
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a6e‮…
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dcb‮…
• https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html Mailing ListThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html Mailing ListThird Party Advisory
• https://security.netapp.com/advisory/ntap-20210819-0003/ Third Party Advisory