vulnerability

Red Hat: CVE-2021-37159: use-after-free in hso_free_net_device() in drivers/net/usb/hso.c (Multiple Advisories)

Name: Red Hat: CVE-2021-37159: use-after-free in hso_free_net_device() in drivers/net/usb/hso.c (Multiple Advisories)
Creator: Red Hat
Published: 2021-07-21T00:00:00.000Z
Keywords: CVE, CWE-415, CWE-416, Red Hat, 2021, 37159, use, redhat-upgrade-kernel, redhat-upgrade-kernel-rt, Severity 4

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

Jul 21, 2021

Added

May 13, 2022

Modified

Mar 27, 2026

Description

hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.

Solutions

redhat-upgrade-kernelredhat-upgrade-kernel-rt

References

CWE-415
CWE-416
EUVD-EUVD-2021-23733
NVD-CVE-2021-37159
REDHAT-RHSA-2022:1975
REDHAT-RHSA-2022:1988
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-23733

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report