Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2021-47087

tee: optee: Fix incorrect page free bug

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix incorrect page free bug Pointer to the allocated pages (struct page *page) has already progressed towards the end of allocation. It is incorrect to perform __free_pages(page, order) using this pointer as we would free any arbitrary pages. Fix this by stop modifying the page pointer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 3c712f14d8a9354a8807c15c64c8dd334499cc42 to < 806142c805cacd098e61bdc0f72c778a2389fe4aaffected
  • 1340dc3fb75ea69221f4f5dcb0cbace55ad0331c to < ad338d825e3f7b96ee542bf313728af2d19fe9adaffected
  • ec185dd3ab257dc2a60953fdf1b6622f524cc5b7 to < 91e94e42f6fc49635f1a16d8ae3f79552bcfda29affected
  • ec185dd3ab257dc2a60953fdf1b6622f524cc5b7 to < 18549bf4b21c739a9def39f27dcac53e27286ab5affected
  • 255e17923b22cb7abd026e044416d61f6bd0eec0affected
  • 5.4.140 to < 5.4.169affected
  • 5.10.58 to < 5.10.89affected
  • 5.13.10 to < 5.14affected

Linux Linux

Default version status: affected

  • 5.14affected
  • 0 to < 5.14unaffected
  • 5.4.169 to ≤ 5.4.*unaffected
  • 5.10.89 to ≤ 5.10.*unaffected
  • 5.15.12 to ≤ 5.15.*unaffected
  • 5.16 to ≤ *unaffected

References