{
  "cveId": "CVE-2021-47355",
  "url": "https://patchblox.com/security/cve/CVE-2021-47355",
  "summary": "CVE-2021-47355 is fixed in linux on 1 platform, first by DEBIAN-CVE-2021-47355, released May 21, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  atm: nicstar: Fix possible use-after-free in nic...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  atm: nicstar: Fix possible use-after-free in nicstar_cleanup()  This module\u0027s remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver\u0027s remove function has finished, which would result in a use-after-free.  Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.",
  "published": "2024-05-21T15:15:21Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00247,
  "epssPercentile": 0.16053,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.14.6-1",
      "fix": "DEBIAN-CVE-2021-47355",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47355",
      "released": "2024-05-21T15:15:21Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.14.6-1",
      "fix": "DEBIAN-CVE-2021-47355",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47355",
      "released": "2024-05-21T15:15:21Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.14.6-1",
      "fix": "DEBIAN-CVE-2021-47355",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47355",
      "released": "2024-05-21T15:15:21Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}