CVE-2021-47668
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Apr 17, 2025
Updated: Apr 21, 2025
CWE ID 416
Summary
CVE-2021-47668 is a vulnerability affecting the Linux kernel. It involves a use-after-free bug in the CAN (Controller Area Network) subsystem's netif_rx_ni() function. After this function call, the skb (Socket Buffer) is no longer valid, yet the memory it points to, aliased as can_frame cf, is still accessed. Specifically, the vulnerable code line is "stats->rx_bytes += cf->len;". By reordering the lines, the issue can be resolved, ensuring the memory is properly freed before being accessed.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.