CVE-2021-47653
Severity CVSS v4.0:
Pending analysis
Type:
CWE-416
Use After Free
Publication date:
26/02/2025
Last modified:
24/03/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
media: davinci: vpif: fix use-after-free on driver unbind<br />
<br />
The driver allocates and registers two platform device structures during<br />
probe, but the devices were never deregistered on driver unbind.<br />
<br />
This results in a use-after-free on driver unbind as the device<br />
structures were allocated using devres and would be freed by driver<br />
core when remove() returns.<br />
<br />
Fix this by adding the missing deregistration calls to the remove()<br />
callback and failing probe on registration errors.<br />
<br />
Note that the platform device structures must be freed using a proper<br />
release callback to avoid leaking associated resources like device<br />
names.
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.13 (including) | 5.15.54 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 5.16.19 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.17 (including) | 5.17.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page