← CVE Intelligence

CVE-2021-47521

can: sja1000: fix use after free in ems_pcmcia_add_card() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: can: sja1000: fix use after free in ems_pcmcia_add_card() If the last channel is not available then "dev" is freed. Fortunately, we can just use "pdev->irq" instead. Also we should check if at least one channel was set up.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected fd734c6f25aea4b2b44b045e489aec67b388577e before cbd86110546f7f730a1f5d7de56c944a336c15c4; affected fd734c6f25aea4b2b44b045e489aec67b388577e before 1dd5b819f7e406dc15bbc7670596ff25261aaa2a; affected fd734c6f25aea4b2b44b045e489aec67b388577e before c8718026ba287168ff9ad0ccc4f9a413062cba36; affected fd734c6f25aea4b2b44b045e489aec67b388577e before ccf070183e4655824936c0f96c4a2bcca93419aa; affected fd734c6f25aea4b2b44b045e489aec67b388577e before 1a295fea90e1acbe80c6d4940f5ff856edcd6bec; affected fd734c6f25aea4b2b44b045e489aec67b388577e before 923f4dc5df679f678e121c20bf2fd70f7bf3e288; affected fd734c6f25aea4b2b44b045e489aec67b388577e before 474f9a8534f5f89841240a7e978bafd6e1e039ce; affected fd734c6f25aea4b2b44b045e489aec67b388577e before 3ec6ca6b1a8e64389f0212b5a1b0f6fed1909e45
Linux / Linuxaffected 3.2; unaffected 0 before 3.2; unaffected 4.4.295 through 4.4.*; unaffected 4.9.293 through 4.9.*; unaffected 4.14.258 through 4.14.*; unaffected 4.19.221 through 4.19.*; unaffected 5.4.165 through 5.4.*; unaffected 5.10.85 through 5.10.*; unaffected 5.15.8 through 5.15.*; unaffected 5.16 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.