CVE-2021-47521

can: sja1000: fix use after free in ems_pcmcia_add_card()

Published May 24, 2024 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Description
In the Linux kernel, the following vulnerability has been resolved:

can: sja1000: fix use after free in ems_pcmcia_add_card()

If the last channel is not available then "dev" is freed. Fortunately,
we can just use "pdev->irq" instead.

Also we should check if at least one channel was set up.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
Linux
Published
Updated
May 11, 2026, 1:56 PM
Reserved
May 24, 2024, 3:02 PM
Status
Modified
Published
May 24, 2024, 3:15 PM
Modified
Jun 17, 2026, 4:17 AM
Severity
Low
Public date
May 24, 2024, 12:00 AM