01 Record

CVE-2021-47235

net: ethernet: fix potential use-after-free in ec_bhf_remove

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

net: ethernet: fix potential use-after-free in ec_bhf_remove

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.23% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 13.7% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-05-21 14:19Z2 YR AGO

Last updated

2026-05-11 13:50Z3 MO AGO

Reserved

2024-04-10

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-416Use After FreeVariant

Data version

5.2

Document digest

cc46aaf1f178357fea031e212dda1949a5c6cf090c885922b50b3ff370854ca5

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux6af55ff52b02d492d45db88df3e461fa51a6f753 to < db2bc3cfd2bc01621014d4f17cdfc74611f339c8, 6af55ff52b02d492d45db88df3e461fa51a6f753 to < 1cafc540b7bf1b6a5a77dc000205fe337ef6eba6, 6af55ff52b02d492d45db88df3e461fa51a6f753 to < b1ad283755095a4b9d1431aeb357d7df1a33d3bb, 6af55ff52b02d492d45db88df3e461fa51a6f753 to < 0260916843cc74f3906acf8b6f256693e01530a2, 6af55ff52b02d492d45db88df3e461fa51a6f753 to < 19f88ca68ccf8771276a606765239b167654f84a, 6af55ff52b02d492d45db88df3e461fa51a6f753 to < 95deeb29d831e2fae608439e243e7a520611e7ea, 6af55ff52b02d492d45db88df3e461fa51a6f753 to < d11d79e52ba080ee567cb7d7eb42a5ade60a8130, 6af55ff52b02d492d45db88df3e461fa51a6f753 to < 9cca0c2d70149160407bda9a9446ce0c29b6e6c6, 3.15—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/db2bc3cfd2bc01621014d4f17cdfc74611f339c8
git.kernel.orghttps://git.kernel.org/stable/c/1cafc540b7bf1b6a5a77dc000205fe337ef6eba6
git.kernel.orghttps://git.kernel.org/stable/c/b1ad283755095a4b9d1431aeb357d7df1a33d3bb
git.kernel.orghttps://git.kernel.org/stable/c/0260916843cc74f3906acf8b6f256693e01530a2
git.kernel.orghttps://git.kernel.org/stable/c/19f88ca68ccf8771276a606765239b167654f84a
git.kernel.orghttps://git.kernel.org/stable/c/95deeb29d831e2fae608439e243e7a520611e7ea
git.kernel.orghttps://git.kernel.org/stable/c/d11d79e52ba080ee567cb7d7eb42a5ade60a8130
git.kernel.orghttps://git.kernel.org/stable/c/9cca0c2d70149160407bda9a9446ce0c29b6e6c6

01 Record index

CVE-2021-47235

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2021-47235

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References