Lucene search

K
redhatcveRedhat.comRH:CVE-2021-47236
HistoryMay 23, 2024 - 2:01 p.m.

CVE-2021-47236

2024-05-2314:01:48
redhat.com
access.redhat.com
1
linux kernel
cdc_eem
vulnerability fix
net
usbnet
skb
mitigation
eem fixup

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.2%

In the Linux kernel, the following vulnerability has been resolved: net: cdc_eem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in eem_tx_fixup(), if skb_copy_expand() failed, it return NULL, usbnet_start_xmit() will have no chance to free original skb. fix it by free orginal skb in eem_tx_fixup() first, then check skb clone status, if failed, return NULL to usbnet.

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.2%