CVE-2021-47306: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: net: fddi: fix UAF in fza_probe fp is netdev private data and it cannot be used after free_netdev() call. Using fp after free_netdev() can cause UAF bug. Fix it by moving free_netdev() after error message. TURBOchannel adapter")

Affected products

• Linux Linux Kernel: from 4.20, before 5.4.135 (fixed in 5.4.135); from 5.5, before 5.10.53 (fixed in 5.10.53); from 5.11, before 5.13.5 (fixed in 5.13.5); version 5.14 only

Published 2024-05-21. Last modified 2026-06-17.