CVE-2021-47334

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> misc/libmasm/module: Fix two use after free in ibmasm_init_one<br /> <br /> In ibmasm_init_one, it calls ibmasm_init_remote_input_dev().<br /> Inside ibmasm_init_remote_input_dev, mouse_dev and keybd_dev are<br /> allocated by input_allocate_device(), and assigned to<br /> sp-&gt;remote.mouse_dev and sp-&gt;remote.keybd_dev respectively.<br /> <br /> In the err_free_devices error branch of ibmasm_init_one,<br /> mouse_dev and keybd_dev are freed by input_free_device(), and return<br /> error. Then the execution runs into error_send_message error branch<br /> of ibmasm_init_one, where ibmasm_free_remote_input_dev(sp) is called<br /> to unregister the freed sp-&gt;remote.mouse_dev and sp-&gt;remote.keybd_dev.<br /> <br /> My patch add a "error_init_remote" label to handle the error of<br /> ibmasm_init_remote_input_dev(), to avoid the uaf bugs.