CVE-2021-47235

A use-after-free vulnerability has been identified in the Linux kernel's Ethernet driver, specifically within the ec_bhf_remove() function. This flaw occurs when the function attempts to utilize a pointer to private data after the associated network device object has already been deallocated. This leads to a use-after-free condition. Successful exploitation of this vulnerability could result in unpredictable system behavior or a kernel-level crash, impacting system availability.

None of the products shipped by Red Hat are affected by this vulnerability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.