In the Linux kernel, the following vulnerability has been resolved:
can: pchcan: pchcanrxnormal: fix use after free
After calling netifreceiveskb(skb), dereferencing skb is unsafe. Especially, the canframe cf which aliases skb memory is dereferenced just after the call netifreceive_skb(skb).
Reordering the lines solves the issue.