imPC@ndo IT

Tracker / CVE-2021-37159

CVE-2021-37159

Medium 6.4

hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.

Affected products and versions

debian debian_linux
linux linux_kernel · … → 5.13.4
oracle communications_cloud_native_core_binding_support_function
oracle communications_cloud_native_core_network_exposure_function
oracle communications_cloud_native_core_policy

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References