{"id":"CVE-2021-47521","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ncan: sja1000: fix use after free in ems_pcmcia_add_card()\n\nIf the last channel is not available then \"dev\" is freed.  Fortunately,\nwe can just use \"pdev-\u003eirq\" instead.\n\nAlso we should check if at least one channel was set up.","modified":"2026-03-15T22:43:15.085449Z","published":"2024-05-24T15:15:14.203Z","related":["SUSE-SU-2024:2008-1","SUSE-SU-2024:2010-1","SUSE-SU-2024:2011-1","SUSE-SU-2024:2019-1","SUSE-SU-2024:2185-1","SUSE-SU-2024:2189-1","SUSE-SU-2024:2190-1"],"references":[{"type":"FIX","url":"https://git.kernel.org/stable/c/ccf070183e4655824936c0f96c4a2bcca93419aa"},{"type":"FIX","url":"https://git.kernel.org/stable/c/1a295fea90e1acbe80c6d4940f5ff856edcd6bec"},{"type":"FIX","url":"https://git.kernel.org/stable/c/1dd5b819f7e406dc15bbc7670596ff25261aaa2a"},{"type":"FIX","url":"https://git.kernel.org/stable/c/3ec6ca6b1a8e64389f0212b5a1b0f6fed1909e45"},{"type":"FIX","url":"https://git.kernel.org/stable/c/474f9a8534f5f89841240a7e978bafd6e1e039ce"},{"type":"FIX","url":"https://git.kernel.org/stable/c/923f4dc5df679f678e121c20bf2fd70f7bf3e288"},{"type":"FIX","url":"https://git.kernel.org/stable/c/c8718026ba287168ff9ad0ccc4f9a413062cba36"},{"type":"FIX","url":"https://git.kernel.org/stable/c/cbd86110546f7f730a1f5d7de56c944a336c15c4"}],"affected":[{"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47521.json","unresolved_ranges":[{"events":[{"introduced":"3.2"},{"fixed":"4.4.295"}]},{"events":[{"introduced":"4.5"},{"fixed":"4.9.293"}]},{"events":[{"introduced":"4.10"},{"fixed":"4.14.258"}]},{"events":[{"introduced":"4.15"},{"fixed":"4.19.221"}]},{"events":[{"introduced":"4.20"},{"fixed":"5.4.165"}]},{"events":[{"introduced":"5.5"},{"fixed":"5.10.85"}]},{"events":[{"introduced":"5.11"},{"fixed":"5.15.8"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}