NetSight
IP …
medium5.5

CVE-2021-47236

In the Linux kernel, the following vulnerability has been resolved: net: cdc_eem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in eem_tx_fixu…

Impact

In the Linux kernel, the following vulnerability has been resolved: net: cdc_eem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in eem_tx_fixup(), if skb_copy_expand() failed, it return NULL, usbnet_start_xmit() will have no chance to free original skb. fix it by free orginal skb in eem_tx_fixup() first, then check skb clone status, if failed, return NULL to usbnet.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.30 before 4.4.274
from 4.5 before 4.9.274
from 4.10 before 4.14.238
from 4.15 before 4.19.196
from 4.20 before 5.4.128
from 5.5 before 5.10.46

Weakness classification

CWE-401

References