Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-46966

ACPI: custom_method: fix potential use-after-free issue

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: custom_method: fix potential use-after-free issue In cm_write(), buf is always freed when reaching the end of the function. If the requested count is less than table.length, the allocated buffer will be freed but subsequent calls to cm_write() will still try to access it. Remove the unconditional kfree(buf) at the end of the function and set the buf to NULL in the -EINVAL error path to match the rest of function.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4bda2b79a9d04c8ba31681c66e95877dbb433416 to < 1d53ca5d131074c925ce38361fb0376d3bf7e394affected
  • 5c12dadcbef8cd55ef1f5dac799bfcbb7ea7db1d to < 8b04d57f30caf76649d0567551589af9a66ca9beaffected
  • 35b88a10535edcf62d3e6b7893a8cd506ff98a24 to < 90575d1d9311b753cf1718f4ce9061ddda7dfd23affected
  • e4467fb6ef547aa352dc03397f9474ec84eced5b to < a5b26a2e362f572d87e9fd35435680e557052a17affected
  • 03d1571d9513369c17e6848476763ebbd10ec2cb to < 72814a94c38a33239793f7622cec6ace1e540c4baffected
  • 03d1571d9513369c17e6848476763ebbd10ec2cb to < 62dc2440ebb552aa0d7f635e1697e077d9d21203affected
  • 03d1571d9513369c17e6848476763ebbd10ec2cb to < f16737caf41fc06cfe6e49048becb09657074d4baffected
  • 03d1571d9513369c17e6848476763ebbd10ec2cb to < b7a5baaae212a686ceb812c32fceed79c03c0234affected
  • 03d1571d9513369c17e6848476763ebbd10ec2cb to < e483bb9a991bdae29a0caa4b3a6d002c968f94aaaffected
  • 70424999fbf1f160ade111cb9baab51776e0f9c2affected
  • 06cd4a06eb596a888239fb8ceb6ea15677cab396affected
  • 4.4.195 to < 4.4.269affected
  • 4.9.195 to < 4.9.269affected
  • 4.14.147 to < 4.14.233affected
  • 4.19.77 to < 4.19.191affected
  • 5.2.19 to < 5.3affected
  • 5.3.4 to < 5.4affected

Linux Linux

Default version status: affected

  • 5.4affected
  • 0 to < 5.4unaffected
  • 4.4.269 to ≤ 4.4.*unaffected
  • 4.9.269 to ≤ 4.9.*unaffected
  • 4.14.233 to ≤ 4.14.*unaffected
  • 4.19.191 to ≤ 4.19.*unaffected
  • 5.4.118 to ≤ 5.4.*unaffected
  • 5.10.36 to ≤ 5.10.*unaffected
  • 5.11.20 to ≤ 5.11.*unaffected
  • 5.12.3 to ≤ 5.12.*unaffected
  • 5.13 to ≤ *unaffected

References