vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2021-47670

can: peak_usb: fix use after free bugs

HIGH
8.8
CVSS Score
Published: April 17, 2025 at 06:01 PM UTC
Updated: August 5, 2026 at 09:24 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8.8
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix use after free bugs After calling peak_usb_netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is accessed after the peak_usb_netif_rx_ni(). Reordering the lines solves the issue.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
4.0 ≤ v < 4.19.1714.0 ≤ v < 5.10.114.0 ≤ v < 5.114.0 ≤ v < 5.4.934.20 ≤ v < 5.4.935.5 ≤ v < 5.10.110a25e1f4f18566b750ebd3ae995af64e23111e635.11 rc15.11 rc25.11 rc35.11 rc4
Vendor states this is fixed in 50aca891d7a554db0901b245167cd653d73aaa71 (fixed)
Vendor states this is fixed in 5408824636fa0dfedb9ecb0d94abd573131bfbbe (fixed)
Vendor states this is fixed in ddd1416f44130377798c1430b76503513b7497c2 (fixed)
Vendor states this is fixed in ec939c13c3fff2114479769c8380b7f1a54feca9 (fixed)
Vendor states this is fixed in 4.0 (unaffected)
Vendor states this is fixed in 4.19.171 (unaffected)
Vendor states this is fixed in 5.10.11 (unaffected)
Vendor states this is fixed in 5.11 (unaffected)
Vendor states this is fixed in 5.4.93 (unaffected)

References (4)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/50aca891d7a554db0901b245167cd653d73aaa71
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5408824636fa0dfedb9ecb0d94abd573131bfbbe
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/ddd1416f44130377798c1430b76503513b7497c2
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/ec939c13c3fff2114479769c8380b7f1a54feca9

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.8HIGHLinux
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-416

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card