← Database

CVE-2021-37159

MEDIUM CVSS: 6.4 Published: 2021-07-21 Modified: 2026-06-17

Description

hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.

Affected Platforms

Oracle Communications Cloud Native Core PolicyDebian Debian LinuxLinux Linux KernelOracle Communications Cloud Native Core Network Exposure FunctionOracle Communications Cloud Native Core Binding Support Function

Weakness Type

CWE-415, CWE-416

References