7.8

CVE-2021-47310: net: ti: fix UAF in tlan_remove_one

Analyzed
AliasesUBUNTU-CVE-2021-47310DEBIAN-CVE-2021-47310
Published 21-05-2024Last modified 11-05-2026

Vulnerability summary

CVE-2021-47310 is a high (CVSS 7.8) Use After Free vulnerability in linux. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 16.7% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
7.8/10
010
High · v3.1 (NVD)
EPSS score
0.25%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 7 · Related 3
RHSA-2024:4211RHSA-2024:4352RHSA-2024:4447RHSA-2024:4740SUSE-SU-2024:1979-1SUSE-SU-2024:1983-1

Timeline

  1. 21-05-2024
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: net: ti: fix UAF in tlan_remove_one priv is netdev private data and it cannot be used after free_netdev() call. Using priv after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.25%

Chance of exploitation in the next 30 days

Percentile

17%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.25% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu87 products
  • linuxAll versions (No fix recorded) | < 4.15.0-159.167 | < 5.4.0-88.99
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 4.15.0-1112.119 | < 5.4.0-1057.60
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa, < a18a8d9cfbb112ad72e625372849adc3986fd6bf | ≥ 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa, < c263ae8c7e4c482387de5e6c89e213f8173fe8b6 | ≥ 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa, < 0538b0ab7d2c396e385694228c7cdcd2d2c514e9 | ≥ 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa, < a0a817b2d308fac090a05cbbe80988e073ac5193 | ≥ 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa, < b7e5563f2a7862a9e4796abb9908b092f677e3c1 | ≥ 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa, < f2a062fcfe1d6f1b0a86fa76ae21c277d65f4405 | ≥ 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa, < 93efab0ef2a607fff9166d447c4035f98b5db342 | ≥ 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa, < 0336f8ffece62f882ab3012820965a786a983f70 | 3.10
  • linux_kernel≥ 3.10, < 4.4.277 | ≥ 4.5, < 4.9.277 | ≥ 4.10, < 4.14.241 | ≥ 4.15, < 4.19.199 | ≥ 4.20, < 5.4.135 | ≥ 5.5, < 5.10.53 | ≥ 5.11, < 5.13.5 | 5.14:rc1
Debian1 product
  • linux< 5.14.6-1

3 vendors · 90 products

References

12 links
Show all 12 references