CVE-2021-47669

In the Linux kernel, the following vulnerability has been resolved:

can: vxcan: vxcan_xmit: fix use after free bug

After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the canfd_frame cfd which aliases skb memory is accessed after the netif_rx_ni().

This vulnerability is rated as Moderate severity because exploitation requires local access to interact with CAN interfaces and is restricted to causing a denial of service through a kernel crash, without directly impacting data confidentiality or integrity. In Red Hat Enterprise Linux, the vxcan module is not enabled or utilized in default deployments, and the vulnerable code is not present in supported enterprise kernel versions. Consequently, typical environments running supported Red Hat products are not exposed to this flaw under default configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.