PT-2024-11307 · Linux+1 · Linux Kernel+1

Pavel Skripkin · Published 2021-07-13 · Updated 2024-12-26 · CVE-2021-47306

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a Use After Free (UAF) bug in the fza probe function. The fp variable, which is netdev private data, cannot be used after the free netdev() call. Using fp after free netdev() can cause a UAF bug. The fix involves moving the free netdev() call after the error message. The vulnerability is associated with the TURBOchannel adapter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-07323

CVE-2021-47306

Affected Products

Astra Linux

Linux Kernel

References · 19

• https://git.kernel.org/stable/c/deb7178eb940e2c5caca1b1db084a69b2e59b4c9 · Patch
• https://git.kernel.org/stable/c/04b06716838bfc26742dbed3ae1d3697fe5317ee · Patch
• https://git.kernel.org/stable/c/bdfbb51f7a437ae8ea91317a5c133ec13adf3c47 · Patch
• https://git.kernel.org/stable/c/f33605908a9b6063525e9f68e62d739948c5fccf · Patch
• https://ubuntu.com/security/CVE-2021-47306 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47306 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47306 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07323 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47306 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47306 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47306 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-47306 · Vendor Advisory
• https://git.kernel.org/linus/deb7178eb940e2c5caca1b1db084a69b2e59b4c9 · Note
• https://git.linuxtesting.ru/pub/scm/linux/kernel/git/lvc/linux-stable.git/commit/?h=v5.10.176-lvc1&id=f33605908a9b6063525e9f68e62d739948c5fccf · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.5 · Note