Linux Kernel Vulnerability in CAN Module by Linux Foundation

CVE-2021-47668

Summary

The Linux kernel contains a vulnerability in the CAN module, where accessing dereferenced memory after it has been freed can lead to instability and potential exploitation. Specifically, after invoking the netif_rx_ni(skb) function, subsequent accesses to skb—particularly for can_frame cf—can introduce unsafe conditions. Revising the order of operations ensures that the integrity of the memory reference is maintained, ultimately enhancing the kernel's reliability.

References