CVE-2021-47669 - Vulnerability Details

Vendors	Products
Linux	Linux Kernel

Link	Providers
https://git.kernel.org/stable/c/6d6dcf2399cdd26f7f5426ca8dd8366b7f2ca105
https://git.kernel.org/stable/c/75854cad5d80976f6ea0f0431f8cedd3bcc475cb
https://git.kernel.org/stable/c/9b820875a32a3443d67bfd368e93038354e98052
https://git.kernel.org/stable/c/a24476b37167816e6352ca1a2cf3769847774f70
https://git.kernel.org/stable/c/e771a874076115df8bff27d325edfd2340e4ec69
https://lore.kernel.org/linux-cve-announce/2025041734-CVE-2021-47669-f268@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2021-47669
https://www.cve.org/CVERecord?id=CVE-2021-47669

Type	Values Removed	Values Added
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:linux:linux_kernel:5.11:rc1:::::: cpe:2.3:o:linux:linux_kernel:5.11:rc2:::::: cpe:2.3:o:linux:linux_kernel:5.11:rc3:::::: cpe:2.3:o:linux:linux_kernel:5.11:rc4::::::
Vendors & Products		Linux Linux linux Kernel

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025041734-CVE-2021-47669-f268@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2021-47669 https://www.cve.org/CVERecord?id=CVE-2021-47669
Metrics	threat_severity `None`	threat_severity `Moderate`

Type	Values Removed	Values Added
Weaknesses		CWE-416
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: can: vxcan: vxcan_xmit: fix use after free bug After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the canfd_frame cfd which aliases skb memory is accessed after the netif_rx_ni().
Title		can: vxcan: vxcan_xmit: fix use after free bug
References		https://git.kernel.org/stable/c/6d6dcf2399cdd26f7f5426ca8dd8366b7f2ca105 https://git.kernel.org/stable/c/75854cad5d80976f6ea0f0431f8cedd3bcc475cb https://git.kernel.org/stable/c/9b820875a32a3443d67bfd368e93038354e98052 https://git.kernel.org/stable/c/a24476b37167816e6352ca1a2cf3769847774f70 https://git.kernel.org/stable/c/e771a874076115df8bff27d325edfd2340e4ec69

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47669", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2025-04-16T07:16:05.752Z", "datePublished": "2025-04-17T18:01:29.979Z", "dateUpdated": "2025-05-04T07:15:49.993Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-05-04T07:15:49.993Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: vxcan: vxcan_xmit: fix use after free bug\n\nAfter calling netif_rx_ni(skb), dereferencing skb is unsafe.\nEspecially, the canfd_frame cfd which aliases skb memory is accessed\nafter the netif_rx_ni()."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/can/vxcan.c"], "versions": [{"version": "a8f820a380a2a06fc4fe1a54159067958f800929", "lessThan": "6d6dcf2399cdd26f7f5426ca8dd8366b7f2ca105", "status": "affected", "versionType": "git"}, {"version": "a8f820a380a2a06fc4fe1a54159067958f800929", "lessThan": "9b820875a32a3443d67bfd368e93038354e98052", "status": "affected", "versionType": "git"}, {"version": "a8f820a380a2a06fc4fe1a54159067958f800929", "lessThan": "a24476b37167816e6352ca1a2cf3769847774f70", "status": "affected", "versionType": "git"}, {"version": "a8f820a380a2a06fc4fe1a54159067958f800929", "lessThan": "e771a874076115df8bff27d325edfd2340e4ec69", "status": "affected", "versionType": "git"}, {"version": "a8f820a380a2a06fc4fe1a54159067958f800929", "lessThan": "75854cad5d80976f6ea0f0431f8cedd3bcc475cb", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/can/vxcan.c"], "versions": [{"version": "4.12", "status": "affected"}, {"version": "0", "lessThan": "4.12", "status": "unaffected", "versionType": "semver"}, {"version": "4.14.218", "lessThanOrEqual": "4.14.*", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.171", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.93", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.11", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.11", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "4.14.218"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "4.19.171"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "5.4.93"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "5.10.11"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "5.11"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/6d6dcf2399cdd26f7f5426ca8dd8366b7f2ca105"}, {"url": "https://git.kernel.org/stable/c/9b820875a32a3443d67bfd368e93038354e98052"}, {"url": "https://git.kernel.org/stable/c/a24476b37167816e6352ca1a2cf3769847774f70"}, {"url": "https://git.kernel.org/stable/c/e771a874076115df8bff27d325edfd2340e4ec69"}, {"url": "https://git.kernel.org/stable/c/75854cad5d80976f6ea0f0431f8cedd3bcc475cb"}], "title": "can: vxcan: vxcan_xmit: fix use after free bug", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2021-47669", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-04-17T18:17:52.149604Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416 Use After Free"}]}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-17T18:25:25.277Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2021-47669 (string)

assignerOrgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

state : PUBLISHED (string)

assignerShortName : Linux (string)

dateReserved : 2025-04-16T07:16:05.752Z (string)

datePublished : 2025-04-17T18:01:29.979Z (string)

dateUpdated : 2025-05-04T07:15:49.993Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

shortName : Linux (string)

dateUpdated : 2025-05-04T07:15:49.993Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: can: vxcan: vxcan_xmit: fix use after free bug After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the canfd_frame cfd which aliases skb memory is accessed after the netif_rx_ni(). (string)

}

]

affected : [ »

0 : { »

product : Linux (string)

vendor : Linux (string)

defaultStatus : unaffected (string)

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

programFiles : [ »

0 : drivers/net/can/vxcan.c (string)

]

versions : [ »

0 : { »

version : a8f820a380a2a06fc4fe1a54159067958f800929 (string)

lessThan : 6d6dcf2399cdd26f7f5426ca8dd8366b7f2ca105 (string)

status : affected (string)

versionType : git (string)

}

1 : { »

version : a8f820a380a2a06fc4fe1a54159067958f800929 (string)

lessThan : 9b820875a32a3443d67bfd368e93038354e98052 (string)

status : affected (string)

versionType : git (string)

}

2 : { »

version : a8f820a380a2a06fc4fe1a54159067958f800929 (string)

lessThan : a24476b37167816e6352ca1a2cf3769847774f70 (string)

status : affected (string)

versionType : git (string)

}

3 : { »

version : a8f820a380a2a06fc4fe1a54159067958f800929 (string)

lessThan : e771a874076115df8bff27d325edfd2340e4ec69 (string)

status : affected (string)

versionType : git (string)

}

4 : { »

version : a8f820a380a2a06fc4fe1a54159067958f800929 (string)

lessThan : 75854cad5d80976f6ea0f0431f8cedd3bcc475cb (string)

status : affected (string)

versionType : git (string)

}

]

}

1 : { »

product : Linux (string)

vendor : Linux (string)

defaultStatus : affected (string)

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

programFiles : [ »

0 : drivers/net/can/vxcan.c (string)

]

versions : [ »

0 : { »

version : 4.12 (string)

status : affected (string)

}

1 : { »

version : 0 (string)

lessThan : 4.12 (string)

status : unaffected (string)

versionType : semver (string)

}

2 : { »

version : 4.14.218 (string)

lessThanOrEqual : 4.14.* (string)

status : unaffected (string)

versionType : semver (string)

}

3 : { »

version : 4.19.171 (string)

lessThanOrEqual : 4.19.* (string)

status : unaffected (string)

versionType : semver (string)

}

4 : { »

version : 5.4.93 (string)

lessThanOrEqual : 5.4.* (string)

status : unaffected (string)

versionType : semver (string)

}

5 : { »

version : 5.10.11 (string)

lessThanOrEqual : 5.10.* (string)

status : unaffected (string)

versionType : semver (string)

}

6 : { »

version : 5.11 (string)

lessThanOrEqual : * (string)

status : unaffected (string)

versionType : original_commit_for_fix (string)

}

]

}

]

cpeApplicability : [ »

0 : { »

nodes : [ »

0 : { »

operator : OR (string)

negate : false (boolean)

cpeMatch : [ »

0 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 4.12 (string)

versionEndExcluding : 4.14.218 (string)

}

1 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 4.12 (string)

versionEndExcluding : 4.19.171 (string)

}

2 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 4.12 (string)

versionEndExcluding : 5.4.93 (string)

}

3 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 4.12 (string)

versionEndExcluding : 5.10.11 (string)

}

4 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 4.12 (string)

versionEndExcluding : 5.11 (string)

}

]

}

]

}

]

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/6d6dcf2399cdd26f7f5426ca8dd8366b7f2ca105 (string)

}

1 : { »

url : https://git.kernel.org/stable/c/9b820875a32a3443d67bfd368e93038354e98052 (string)

}

2 : { »

url : https://git.kernel.org/stable/c/a24476b37167816e6352ca1a2cf3769847774f70 (string)

}

3 : { »

url : https://git.kernel.org/stable/c/e771a874076115df8bff27d325edfd2340e4ec69 (string)

}

4 : { »

url : https://git.kernel.org/stable/c/75854cad5d80976f6ea0f0431f8cedd3bcc475cb (string)

}

]

title : can: vxcan: vxcan_xmit: fix use after free bug (string)

x_generator : { »

engine : bippy-1.2.0 (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 7.8 (number)

attackVector : LOCAL (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2021-47669 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-04-17T18:17:52.149604Z (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-416 (string)

description : CWE-416 Use After Free (string)

}

]

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-17T18:25:25.277Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2021-47669", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-04-17T18:17:52.149604Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416 Use After Free"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-17T18:17:53.914Z"}}], "cna": {"title": "can: vxcan: vxcan_xmit: fix use after free bug", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "a8f820a380a2a06fc4fe1a54159067958f800929", "lessThan": "6d6dcf2399cdd26f7f5426ca8dd8366b7f2ca105", "versionType": "git"}, {"status": "affected", "version": "a8f820a380a2a06fc4fe1a54159067958f800929", "lessThan": "9b820875a32a3443d67bfd368e93038354e98052", "versionType": "git"}, {"status": "affected", "version": "a8f820a380a2a06fc4fe1a54159067958f800929", "lessThan": "a24476b37167816e6352ca1a2cf3769847774f70", "versionType": "git"}, {"status": "affected", "version": "a8f820a380a2a06fc4fe1a54159067958f800929", "lessThan": "e771a874076115df8bff27d325edfd2340e4ec69", "versionType": "git"}, {"status": "affected", "version": "a8f820a380a2a06fc4fe1a54159067958f800929", "lessThan": "75854cad5d80976f6ea0f0431f8cedd3bcc475cb", "versionType": "git"}], "programFiles": ["drivers/net/can/vxcan.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.12"}, {"status": "unaffected", "version": "0", "lessThan": "4.12", "versionType": "semver"}, {"status": "unaffected", "version": "4.14.218", "versionType": "semver", "lessThanOrEqual": "4.14.*"}, {"status": "unaffected", "version": "4.19.171", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.93", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.11", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.11", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/can/vxcan.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/6d6dcf2399cdd26f7f5426ca8dd8366b7f2ca105"}, {"url": "https://git.kernel.org/stable/c/9b820875a32a3443d67bfd368e93038354e98052"}, {"url": "https://git.kernel.org/stable/c/a24476b37167816e6352ca1a2cf3769847774f70"}, {"url": "https://git.kernel.org/stable/c/e771a874076115df8bff27d325edfd2340e4ec69"}, {"url": "https://git.kernel.org/stable/c/75854cad5d80976f6ea0f0431f8cedd3bcc475cb"}], "x_generator": {"engine": "bippy-1.0.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: vxcan: vxcan_xmit: fix use after free bug\n\nAfter calling netif_rx_ni(skb), dereferencing skb is unsafe.\nEspecially, the canfd_frame cfd which aliases skb memory is accessed\nafter the netif_rx_ni()."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-04-17T18:01:29.979Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47669", "state": "PUBLISHED", "dateUpdated": "2025-04-17T18:25:25.277Z", "dateReserved": "2025-04-16T07:16:05.752Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2025-04-17T18:01:29.979Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 7.8 (number)

attackVector : LOCAL (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2021-47669 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-04-17T18:17:52.149604Z (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-416 (string)

description : CWE-416 Use After Free (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-17T18:17:53.914Z (string)

}

]

cna : { »

title : can: vxcan: vxcan_xmit: fix use after free bug (string)

affected : [ »

0 : { »

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

vendor : Linux (string)

product : Linux (string)

versions : [ »

0 : { »

status : affected (string)

version : a8f820a380a2a06fc4fe1a54159067958f800929 (string)

lessThan : 6d6dcf2399cdd26f7f5426ca8dd8366b7f2ca105 (string)

versionType : git (string)

}

1 : { »

status : affected (string)

version : a8f820a380a2a06fc4fe1a54159067958f800929 (string)

lessThan : 9b820875a32a3443d67bfd368e93038354e98052 (string)

versionType : git (string)

}

2 : { »

status : affected (string)

version : a8f820a380a2a06fc4fe1a54159067958f800929 (string)

lessThan : a24476b37167816e6352ca1a2cf3769847774f70 (string)

versionType : git (string)

}

3 : { »

status : affected (string)

version : a8f820a380a2a06fc4fe1a54159067958f800929 (string)

lessThan : e771a874076115df8bff27d325edfd2340e4ec69 (string)

versionType : git (string)

}

4 : { »

status : affected (string)

version : a8f820a380a2a06fc4fe1a54159067958f800929 (string)

lessThan : 75854cad5d80976f6ea0f0431f8cedd3bcc475cb (string)

versionType : git (string)

}

]

programFiles : [ »

0 : drivers/net/can/vxcan.c (string)

]

defaultStatus : unaffected (string)

}

1 : { »

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

vendor : Linux (string)

product : Linux (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.12 (string)

}

1 : { »

status : unaffected (string)

version : 0 (string)

lessThan : 4.12 (string)

versionType : semver (string)

}

2 : { »

status : unaffected (string)

version : 4.14.218 (string)

versionType : semver (string)

lessThanOrEqual : 4.14.* (string)

}

3 : { »

status : unaffected (string)

version : 4.19.171 (string)

versionType : semver (string)

lessThanOrEqual : 4.19.* (string)

}

4 : { »

status : unaffected (string)

version : 5.4.93 (string)

versionType : semver (string)

lessThanOrEqual : 5.4.* (string)

}

5 : { »

status : unaffected (string)

version : 5.10.11 (string)

versionType : semver (string)

lessThanOrEqual : 5.10.* (string)

}

6 : { »

status : unaffected (string)

version : 5.11 (string)

versionType : original_commit_for_fix (string)

lessThanOrEqual : * (string)

}

]

programFiles : [ »

0 : drivers/net/can/vxcan.c (string)

]

defaultStatus : affected (string)

}

]

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/6d6dcf2399cdd26f7f5426ca8dd8366b7f2ca105 (string)

}

1 : { »

url : https://git.kernel.org/stable/c/9b820875a32a3443d67bfd368e93038354e98052 (string)

}

2 : { »

url : https://git.kernel.org/stable/c/a24476b37167816e6352ca1a2cf3769847774f70 (string)

}

3 : { »

url : https://git.kernel.org/stable/c/e771a874076115df8bff27d325edfd2340e4ec69 (string)

}

4 : { »

url : https://git.kernel.org/stable/c/75854cad5d80976f6ea0f0431f8cedd3bcc475cb (string)

}

]

x_generator : { »

engine : bippy-1.0.0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: can: vxcan: vxcan_xmit: fix use after free bug After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the canfd_frame cfd which aliases skb memory is accessed after the netif_rx_ni(). (string)

}

]

providerMetadata : { »

orgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

shortName : Linux (string)

dateUpdated : 2025-04-17T18:01:29.979Z (string)

}

cveMetadata : { »

cveId : CVE-2021-47669 (string)

state : PUBLISHED (string)

dateUpdated : 2025-04-17T18:25:25.277Z (string)

dateReserved : 2025-04-16T07:16:05.752Z (string)

assignerOrgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

datePublished : 2025-04-17T18:01:29.979Z (string)

assignerShortName : Linux (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D55AC4D7-E3A8-42B4-AD78-C7E85336E00A", "versionEndExcluding": "4.14.218", "versionStartIncluding": "4.12", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E048F4A6-F5E6-41BF-BCD6-49274CA46915", "versionEndExcluding": "4.19.171", "versionStartIncluding": "4.15", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "3F19E9ED-75CE-4576-98F5-2746C9189696", "versionEndExcluding": "5.4.93", "versionStartIncluding": "4.20", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "B62A8CB5-77B4-40A9-8B60-AF691EC1FB99", "versionEndExcluding": "5.10.11", "versionStartIncluding": "5.5", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.11:rc1:*:*:*:*:*:*", "matchCriteriaId": "18B1C9CE-F7E4-426B-A770-79F86AB5CC38", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.11:rc2:*:*:*:*:*:*", "matchCriteriaId": "7A70E596-2EF7-4651-B2EF-2CEE31DB6893", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.11:rc3:*:*:*:*:*:*", "matchCriteriaId": "18C82C96-2853-4DFE-93AD-F6E59B4129CA", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.11:rc4:*:*:*:*:*:*", "matchCriteriaId": "A330B043-47EA-4D06-82BF-153A1735FC11", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: vxcan: vxcan_xmit: fix use after free bug\n\nAfter calling netif_rx_ni(skb), dereferencing skb is unsafe.\nEspecially, the canfd_frame cfd which aliases skb memory is accessed\nafter the netif_rx_ni()."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: can: vxcan: vxcan_xmit: correcci\u00f3n del error \"use after free\". Tras llamar a netif_rx_ni(skb), desreferenciar skb no es seguro. En particular, se accede al cfd canfd_frame, que crea un alias de memoria skb, despu\u00e9s de netif_rx_ni()."}], "id": "CVE-2021-47669", "lastModified": "2025-04-21T18:41:22.637", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2025-04-17T18:15:43.730", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/6d6dcf2399cdd26f7f5426ca8dd8366b7f2ca105"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/75854cad5d80976f6ea0f0431f8cedd3bcc475cb"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9b820875a32a3443d67bfd368e93038354e98052"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/a24476b37167816e6352ca1a2cf3769847774f70"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/e771a874076115df8bff27d325edfd2340e4ec69"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : D55AC4D7-E3A8-42B4-AD78-C7E85336E00A (string)

versionEndExcluding : 4.14.218 (string)

versionStartIncluding : 4.12 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E048F4A6-F5E6-41BF-BCD6-49274CA46915 (string)

versionEndExcluding : 4.19.171 (string)

versionStartIncluding : 4.15 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 3F19E9ED-75CE-4576-98F5-2746C9189696 (string)

versionEndExcluding : 5.4.93 (string)

versionStartIncluding : 4.20 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B62A8CB5-77B4-40A9-8B60-AF691EC1FB99 (string)

versionEndExcluding : 5.10.11 (string)

versionStartIncluding : 5.5 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:linux:linux_kernel:5.11:rc1:*:*:*:*:*:* (string)

matchCriteriaId : 18B1C9CE-F7E4-426B-A770-79F86AB5CC38 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:linux:linux_kernel:5.11:rc2:*:*:*:*:*:* (string)

matchCriteriaId : 7A70E596-2EF7-4651-B2EF-2CEE31DB6893 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:linux:linux_kernel:5.11:rc3:*:*:*:*:*:* (string)

matchCriteriaId : 18C82C96-2853-4DFE-93AD-F6E59B4129CA (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:linux:linux_kernel:5.11:rc4:*:*:*:*:*:* (string)

matchCriteriaId : A330B043-47EA-4D06-82BF-153A1735FC11 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: can: vxcan: vxcan_xmit: fix use after free bug After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the canfd_frame cfd which aliases skb memory is accessed after the netif_rx_ni(). (string)

}

1 : { »

lang : es (string)

value : En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: can: vxcan: vxcan_xmit: corrección del error "use after free". Tras llamar a netif_rx_ni(skb), desreferenciar skb no es seguro. En particular, se accede al cfd canfd_frame, que crea un alias de memoria skb, después de netif_rx_ni(). (string)

}

]

id : CVE-2021-47669 (string)

lastModified : 2025-04-21T18:41:22.637 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2025-04-17T18:15:43.730 (string)

references : [ »

0 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/6d6dcf2399cdd26f7f5426ca8dd8366b7f2ca105 (string)

}

1 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/75854cad5d80976f6ea0f0431f8cedd3bcc475cb (string)

}

2 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/9b820875a32a3443d67bfd368e93038354e98052 (string)

}

3 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/a24476b37167816e6352ca1a2cf3769847774f70 (string)

}

4 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/e771a874076115df8bff27d325edfd2340e4ec69 (string)

}

]

sourceIdentifier : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-416 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Show plain JSON

{"bugzilla": {"description": "kernel: can: vxcan: vxcan_xmit: fix use after free bug", "id": "2360787", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2360787"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-416", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ncan: vxcan: vxcan_xmit: fix use after free bug\nAfter calling netif_rx_ni(skb), dereferencing skb is unsafe.\nEspecially, the canfd_frame cfd which aliases skb memory is accessed\nafter the netif_rx_ni()."], "name": "CVE-2021-47669", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2025-04-17T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-47669\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-47669\nhttps://lore.kernel.org/linux-cve-announce/2025041734-CVE-2021-47669-f268@gregkh/T"], "threat_severity": "Moderate"}

{

bugzilla : { »

description : kernel: can: vxcan: vxcan_xmit: fix use after free bug (string)

id : 2360787 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2360787 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 5.5 (string)

cvss3_scoring_vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

status : draft (string)

}

cwe : CWE-416 (string)

details : [ »

0 : In the Linux kernel, the following vulnerability has been resolved: can: vxcan: vxcan_xmit: fix use after free bug After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the canfd_frame cfd which aliases skb memory is accessed after the netif_rx_ni(). (string)

]

name : CVE-2021-47669 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Not affected (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

1 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Not affected (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

2 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Not affected (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

3 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Not affected (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

4 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Not affected (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

5 : { »

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

fix_state : Not affected (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 9 (string)

}

6 : { »

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

fix_state : Not affected (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 9 (string)

}

]

public_date : 2025-04-17T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2021-47669 https://nvd.nist.gov/vuln/detail/CVE-2021-47669 https://lore.kernel.org/linux-cve-announce/2025041734-CVE-2021-47669-f268@gregkh/T (string)

]

threat_severity : Moderate (string)

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object