Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2021-47049

Drivers: hv: vmbus: Use after free in __vmbus_open()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Use after free in __vmbus_open() The "open_info" variable is added to the &vmbus_connection.chn_msg_list, but the error handling frees "open_info" without removing it from the list. This will result in a use after free. First remove it from the list, and then free it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6f3d791f300618caf82a2be0c27456edd76d5164 to < d5c7b42c9f56ca46b286daa537d181bd7f69214faffected
  • 6f3d791f300618caf82a2be0c27456edd76d5164 to < f37dd5d1b5d38a79a4f7b8dd7bbb705505f05560affected
  • 6f3d791f300618caf82a2be0c27456edd76d5164 to < 2728f289b3270b0e273292b46c534421a33bbfd5affected
  • 6f3d791f300618caf82a2be0c27456edd76d5164 to < 3e9bf43f7f7a46f21ec071cb47be92d0874c48daaffected
  • 6b32d45bd59982751beb8220e442b40b2706647faffected
  • 4.13.9 to < 4.14affected

Linux Linux

Default version status: affected

  • 4.14affected
  • 0 to < 4.14unaffected
  • 5.10.37 to ≤ 5.10.*unaffected
  • 5.11.21 to ≤ 5.11.*unaffected
  • 5.12.4 to ≤ 5.12.*unaffected
  • 5.13 to ≤ *unaffected

References