PT-2021-29541 · Linux · Linux Kernel

Published

2021-06-30

·

Updated

2021-06-30

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.13
Description The issue is related to a Use-after-Free condition in the can: j1939 component. It was introduced in version v5.4 and fixed in version v5.12.13. The actual impact and attack plausibility have not yet been proven.
Recommendations For Linux Kernel versions prior to v5.12.13, update to version v5.12.13 or later to resolve the issue. As a temporary workaround, consider holding the skb ref while it is in use to prevent the Use-after-Free condition.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

UVI-2021-1001076

Affected Products

Linux Kernel