{"id":"CVE-2021-47013","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send\n\nIn emac_mac_tx_buf_send, it calls emac_tx_fill_tpd(..,skb,..).\nIf some error happens in emac_tx_fill_tpd(), the skb will be freed via\ndev_kfree_skb(skb) in error branch of emac_tx_fill_tpd().\nBut the freed skb is still used via skb-\u003elen by netdev_sent_queue(,skb-\u003elen).\n\nAs i observed that emac_tx_fill_tpd() haven't modified the value of skb-\u003elen,\nthus my patch assigns skb-\u003elen to 'len' before the possible free and\nuse 'len' instead of skb-\u003elen later.","modified":"2026-03-15T22:42:44.184422Z","published":"2024-02-28T09:15:38.800Z","related":["ALSA-2024:3618","SUSE-SU-2024:0856-1","SUSE-SU-2024:0857-1","SUSE-SU-2024:0925-1","SUSE-SU-2024:0926-1","SUSE-SU-2024:0975-1","SUSE-SU-2024:0976-1","SUSE-SU-2024:1454-1","SUSE-SU-2024:1489-1"],"references":[{"type":"FIX","url":"https://git.kernel.org/stable/c/16d8c44be52e3650917736d45f5904384a9da834"},{"type":"FIX","url":"https://git.kernel.org/stable/c/55fcdd1258faaecca74b91b88cc0921f9edd775d"},{"type":"FIX","url":"https://git.kernel.org/stable/c/6d72e7c767acbbdd44ebc7d89c6690b405b32b57"},{"type":"FIX","url":"https://git.kernel.org/stable/c/8c06f34785068b87e2b560534c77c163d6c6dca7"},{"type":"FIX","url":"https://git.kernel.org/stable/c/9dc373f74097edd0e35f3393d6248eda8d1ba99d"},{"type":"FIX","url":"https://git.kernel.org/stable/c/c7f75d11fe72913d2619f97b2334b083cd7bb955"},{"type":"FIX","url":"https://git.kernel.org/stable/c/dc1b438a35773d030be0ee80d9c635c3e558a322"},{"type":"FIX","url":"https://git.kernel.org/stable/c/e407495ba6788a67d1bd41714158c079e340879b"}],"affected":[{"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47013.json","unresolved_ranges":[{"events":[{"introduced":"4.9"},{"fixed":"4.9.269"}]},{"events":[{"introduced":"4.10"},{"fixed":"4.14.233"}]},{"events":[{"introduced":"4.15"},{"fixed":"4.19.191"}]},{"events":[{"introduced":"4.20"},{"fixed":"5.4.119"}]},{"events":[{"introduced":"5.5"},{"fixed":"5.10.37"}]},{"events":[{"introduced":"5.11"},{"fixed":"5.11.21"}]},{"events":[{"introduced":"5.12"},{"fixed":"5.12.4"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}