Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2021-47670: Linux kernel can: peak_usb can cause system crash
CVE-2021-47670 · published 1 year ago
Summary
The core of the Linux operating system used by many distributions has a bug where a network packet buffer is accessed after it has been released. This can lead to a crash or instability on systems that use the can: peak_usb driver. Apply the latest kernel updates from your Linux vendor to get the fix.
What to do
- Update canonical linux-oracle to version 4.15.0-1069.77.
- Update canonical linux-azure to version 4.15.0-1112.124~14.04.1.
- Update canonical linux-aws-hwe to version 4.15.0-1098.105~16.04.1.
- Update canonical linux-azure to version 4.15.0-1112.124~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1097.110~16.04.1.
- Update canonical linux-hwe to version 4.15.0-142.146~16.04.1.
- Update canonical linux-oracle to version 4.15.0-1069.77~16.04.1.
- Update canonical linux to version 4.15.0-141.145.
- Update canonical linux-aws to version 4.15.0-1098.105.
- Update canonical linux-aws-5.4 to version 5.4.0-1039.41~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1112.125.
- Update canonical linux-azure-5.4 to version 5.4.0-1041.43~18.04.1.
- Update canonical linux-gcp-4.15 to version 4.15.0-1097.110.
- Update canonical linux-gcp-5.4 to version 5.4.0-1038.41~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-67.75~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1089.91.
- Update canonical linux-oracle-5.4 to version 5.4.0-1039.42~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1030.33~18.04.1.
- Update canonical linux-aws-fips to version 4.15.0-2041.43.
- Update canonical linux-azure-fips to version 4.15.0-2024.27.
- Update canonical linux-fips to version 4.15.0-1057.65.
- Update canonical linux to version 5.4.0-67.75.
- Update canonical linux-aws to version 5.4.0-1039.41.
- Update canonical linux-azure to version 5.4.0-1041.43.
- Update canonical linux-gcp to version 5.4.0-1038.41.
- Update canonical linux-kvm to version 5.4.0-1034.35.
- Update canonical linux-oracle to version 5.4.0-1039.42.
- Update canonical linux-raspi to version 5.4.0-1030.33.
- Update canonical linux-aws-fips to version 5.4.0-1069.73+fips2.
- Update canonical linux-azure-fips to version 5.4.0-1073.76+fips1.
- Update canonical linux-gcp-fips to version 5.4.0-1067.71~20.04.1.
- Update debian linux to version 5.10.12-1.
- Update linux linux to version 5408824636fa0dfedb9ecb0d94abd573131bfbbe or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 4.0, < 4.19.171 >= 4.20, < 5.4.93 >= 5.5, < 5.10.11 5.11 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | linux | linux |
< 5408824636fa0dfedb9ecb0d94abd573131bfbbe 4.0 |
| Ubuntu:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1069.77 Fix: upgrade to 4.15.0-1069.77
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1112.124~14.04.1 Fix: upgrade to 4.15.0-1112.124~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1098.105~16.04.1 Fix: upgrade to 4.15.0-1098.105~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-azure |
< 4.15.0-1112.124~16.04.1 Fix: upgrade to 4.15.0-1112.124~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1097.110~16.04.1 Fix: upgrade to 4.15.0-1097.110~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe |
< 4.15.0-142.146~16.04.1 Fix: upgrade to 4.15.0-142.146~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1069.77~16.04.1 Fix: upgrade to 4.15.0-1069.77~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-141.145 Fix: upgrade to 4.15.0-141.145
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1098.105 Fix: upgrade to 4.15.0-1098.105
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1039.41~18.04.1 Fix: upgrade to 5.4.0-1039.41~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1112.125 Fix: upgrade to 4.15.0-1112.125
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1041.43~18.04.1 Fix: upgrade to 5.4.0-1041.43~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1097.110 Fix: upgrade to 4.15.0-1097.110
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1038.41~18.04.1 Fix: upgrade to 5.4.0-1038.41~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-67.75~18.04.1 Fix: upgrade to 5.4.0-67.75~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1089.91 Fix: upgrade to 4.15.0-1089.91
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1039.42~18.04.1 Fix: upgrade to 5.4.0-1039.42~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1030.33~18.04.1 Fix: upgrade to 5.4.0-1030.33~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2041.43 Fix: upgrade to 4.15.0-2041.43
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2024.27 Fix: upgrade to 4.15.0-2024.27
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1057.65 Fix: upgrade to 4.15.0-1057.65
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-67.75 Fix: upgrade to 5.4.0-67.75
|
Showing 50 of 129. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1039.41 Fix: upgrade to 5.4.0-1039.41
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1041.43 Fix: upgrade to 5.4.0-1041.43
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1038.41 Fix: upgrade to 5.4.0-1038.41
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1034.35 Fix: upgrade to 5.4.0-1034.35
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1039.42 Fix: upgrade to 5.4.0-1039.42
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1030.33 Fix: upgrade to 5.4.0-1030.33
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1069.73+fips2 Fix: upgrade to 5.4.0-1069.73+fips2
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1073.76+fips1 Fix: upgrade to 5.4.0-1073.76+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1067.71~20.04.1 Fix: upgrade to 5.4.0-1067.71~20.04.1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-7.0 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Debian:12 | debian | linux |
< 5.10.12-1 Fix: upgrade to 5.10.12-1
|
Original advisory text
can: peak_usb: fix use after free bugs
In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix use after free bugs After calling peak_usb_netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is accessed after the peak_usb_netif_rx_ni(). Reordering the lines solves the issue.
References
- https://ubuntu.com/security/CVE-2021-47670 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2021-47670 Third Party Advisory
- https://git.kernel.org/linus/50aca891d7a554db0901b245167cd653d73aaa71 Third Party Advisory
- https://git.kernel.org/stable/c/ec939c13c3fff2114479769c8380b7f1a54feca9 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2021-47670 Vendor Advisory
- https://git.kernel.org/stable/c/50aca891d7a554db0901b245167cd653d73aaa71 Third Party Advisory
- https://git.kernel.org/stable/c/5408824636fa0dfedb9ecb0d94abd573131bfbbe Third Party Advisory
- https://git.kernel.org/stable/c/ddd1416f44130377798c1430b76503513b7497c2 Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-416Use After Free
Timeline
Published17 Apr 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
UBUNTU-CVE-2021-47670 · OSV
CVE-2021-47670 · NVD
CVE-2021-47670 · MITRE
DEBIAN-CVE-2021-47670 · OSV
Track software like this
Free during beta