PT-2025-17217 · Linux+2 · Linux Kernel+2

Published 2025-04-17 · Updated 2025-05-21 · CVE-2021-47668

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use after free bug has been identified in the Linux kernel. The issue occurs after calling netif rx ni(skb), where dereferencing skb becomes unsafe. Specifically, the can frame cf which aliases skb memory is accessed after netif rx ni() in the line stats->rx bytes += cf->len;. Reordering the lines solves the issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2021-47668

OESA-2025-1465

OPENSUSE-SU-2025_01633-1

SUSE-SU-2025:01600-1

SUSE-SU-2025:01633-1

SUSE-SU-2025:1574-1

SUSE-SU-2025_01600-1

SUSE-SU-2025_01633-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 290

• https://nvd.nist.gov/vuln/detail/CVE-2025-21764 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49385 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49084 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:01633-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21759 · Security Note
• https://git.kernel.org/stable/c/260925a0b7d2da5449f8ecfd02c1405e0c8a45b8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49086 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49298 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21761 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47641 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47668 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47668 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53023 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-22035 · Security Note
• https://git.kernel.org/stable/c/92668d28c7e6a7a2ba07df287669ffcdf650c421 · Patch