CVE-2021-47669

Summary

CVE-2021-47669 is a vulnerability affecting the Linux kernel's CAN (Controller Area Network) subsystem, specifically the vxcan driver. The issue arises from a use-after-free bug, which occurs after the netif_rx_ni(skb) function call. This vulnerability allows an attacker to dereference the skb memory, which is aliased by the canfd_frame cfd, rendering it unsafe for further use. Successful exploitation of this vulnerability could lead to arbitrary code execution or denial-of-service attacks. This vulnerability has been addressed in recent Linux kernel updates.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.