Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: net: fddi: fix UAF in fza_probe fp is netdev private data and it cannot be used after free_netdev() call. Using fp after free_netdev() can cause UAF bug. Fix it by moving free_netdev() after error message. TURBOchannel adapter")
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 61414f5ec9834df8aa4f55c90de16b71a3d6ca8d before 04b06716838bfc26742dbed3ae1d3697fe5317ee; affected 61414f5ec9834df8aa4f55c90de16b71a3d6ca8d before f33605908a9b6063525e9f68e62d739948c5fccf; affected 61414f5ec9834df8aa4f55c90de16b71a3d6ca8d before bdfbb51f7a437ae8ea91317a5c133ec13adf3c47; affected 61414f5ec9834df8aa4f55c90de16b71a3d6ca8d before deb7178eb940e2c5caca1b1db084a69b2e59b4c9 |
| Linux / Linux | affected 4.20; unaffected 0 before 4.20; unaffected 5.4.135 through 5.4.*; unaffected 5.10.53 through 5.10.*; unaffected 5.13.5 through 5.13.*; unaffected 5.14 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/04b06716838bfc26742dbed3ae1d3697fe5317ee
- https://git.kernel.org/stable/c/f33605908a9b6063525e9f68e62d739948c5fccf
- https://git.kernel.org/stable/c/bdfbb51f7a437ae8ea91317a5c133ec13adf3c47
- https://git.kernel.org/stable/c/deb7178eb940e2c5caca1b1db084a69b2e59b4c9
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.