PT-2025-17219 · Linux+6 · Linux Kernel+6

Published 2025-04-17 · Updated 2025-08-12 · CVE-2021-47670

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use after free bug has been identified in the Linux kernel, specifically in the peak usb component. The issue arises after calling the peak usb netif rx ni() function with the skb variable, as dereferencing skb becomes unsafe. This is particularly problematic when accessing the can frame cf which shares memory with skb after the peak usb netif rx ni() call. Reordering the lines of code resolves the issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025:13589

ALSA-2025:13590

CESA-2025_13589

CESA-2025_13590

CVE-2021-47670

INFSA-2025_13589

INFSA-2025_13590

OESA-2025-1465

OPENSUSE-SU-2025_01633-1

RHSA-2025:13589

RHSA-2025:13590

RHSA-2025:14136

RHSA-2025:14511

RHSA-2025:14692

RHSA-2025:15035

RHSA-2025_13589

RHSA-2025_13590

SUSE-SU-2025:01633-1

SUSE-SU-2025:01983-1

SUSE-SU-2025:1574-1

SUSE-SU-2025_01633-1

SUSE-SU-2025_01983-1

Affected Products

Almalinux

Astra Linux

Centos

Linux Kernel

Red Hat

Rocky Linux

Suse

References · 465

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/H4K6/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19319 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447 · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49429 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-22055 · Security Note
• https://git.kernel.org/stable/c/5408824636fa0dfedb9ecb0d94abd573131bfbbe · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47670 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21760 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-22004 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:01633-1 · Vendor Advisory