01 Record

CVE-2021-47239

net: usb: fix possible use-after-free in smsc75xx_bind

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

net: usb: fix possible use-after-free in smsc75xx_bind

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.23% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 13.7% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-17.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-05-21 14:19Z2 YR AGO

Last updated

2026-05-11 13:50Z3 MO AGO

Reserved

2024-04-10

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-416Use After FreeVariant

Data version

5.2

Document digest

147ee7ee630a8544e606c574a8a6210b415387bbadfac3b9fb5519d2dd8838e8

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux200dbfcad8011e50c3cec269ed7b980836eeb1fa to < 7cc8b2e05fcea6edd022d26e82091d781af8fd9b, 22c840596af0c09068b6cf948616e6496e59e07f to < 64160d1741a3de5204d1a822e058e0b4cc526504, 9e6b8c1ff9d997e1fa16cbd2d60739adf6dc1bbc to < c4e3be2e7742863e454ce31faf8fd0109c00050b, 9e6a3eccb28779710cbbafc4f4258d92509c6d07 to < 2fc8300c9cfa5167fcb5b1a2a07db6f53e82f59b, b95fb96e6339e34694dd578fb6bde3575b01af17 to < 4252bf6c2b245f47011098113d405ffad6ad5d5b, 635ac38b36255d3cfb8312cf7c471334f4d537e0 to < 570a52cf3e01d19f7fd1a251dfc52b0cd86c13cb, 70c886ac93f87ae7214a0c69151a28a8075dd95b to < 14616c372a7be01a2fb8c56c9d8debd232b9e43d, 46a8b29c6306d8bbfd92b614ef65a47c900d8e70 to < 56b786d86694e079d8aad9b314e015cd4ac02a3d, 4.4.271 to < 4.4.274, 4.9.271 to < 4.9.274, 4.14.235 to < 4.14.238, 4.19.193 to < 4.19.196, 5.4.124 to < 5.4.128, 5.10.42 to < 5.10.46, 5.12.9 to < 5.12.13—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/7cc8b2e05fcea6edd022d26e82091d781af8fd9b
git.kernel.orghttps://git.kernel.org/stable/c/64160d1741a3de5204d1a822e058e0b4cc526504
git.kernel.orghttps://git.kernel.org/stable/c/c4e3be2e7742863e454ce31faf8fd0109c00050b
git.kernel.orghttps://git.kernel.org/stable/c/2fc8300c9cfa5167fcb5b1a2a07db6f53e82f59b
git.kernel.orghttps://git.kernel.org/stable/c/4252bf6c2b245f47011098113d405ffad6ad5d5b
git.kernel.orghttps://git.kernel.org/stable/c/570a52cf3e01d19f7fd1a251dfc52b0cd86c13cb
git.kernel.orghttps://git.kernel.org/stable/c/14616c372a7be01a2fb8c56c9d8debd232b9e43d
git.kernel.orghttps://git.kernel.org/stable/c/56b786d86694e079d8aad9b314e015cd4ac02a3d

01 Record index

CVE-2021-47239

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2021-47239

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References