Use After Free Vulnerability in Linux Kernel Affecting Peak USB Component

CVE-2021-47670

Summary

A vulnerability affecting the Linux Kernel has been identified in the Peak USB component. The flaw, categorized as a use after free issue, occurs after the invocation of the 'peak_usb_netif_rx_ni(skb)' function, leading to unsafe dereferencing of 'skb'. This situation arises particularly when accessing the 'can_frame cf', which references the memory associated with 'skb' after it has been freed. Reordering specific lines of code has been implemented to remediate this vulnerability, ensuring that memory management is handled safely.

References