Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47361

mcb: fix error handling in mcb_alloc_bus()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: mcb: fix error handling in mcb_alloc_bus() There are two bugs: 1) If ida_simple_get() fails then this code calls put_device(carrier) but we haven't yet called get_device(carrier) and probably that leads to a use after free. 2) After device_initialize() then we need to use put_device() to release the bus. This will free the internal resources tied to the device and call mcb_free_bus() which will free the rest.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 18d28819809909c3f24bb72183a901c5e332a63d to < 8a558261fa57a6deefb0925ab1829f698b194aeaaffected
  • 18d28819809909c3f24bb72183a901c5e332a63d to < 115b07d9f47e3996430b8f2007edd9768e1f807faffected
  • 18d28819809909c3f24bb72183a901c5e332a63d to < 66f74ba9be9daf9c47fface6af3677f602774f6baffected
  • 18d28819809909c3f24bb72183a901c5e332a63d to < 7751f609eadf36b1f53712bae430019c53a16eb0affected
  • 18d28819809909c3f24bb72183a901c5e332a63d to < 91e4ad05bf18322b5921d1a6c9b603f6eb1694f0affected
  • 18d28819809909c3f24bb72183a901c5e332a63d to < 9fc198f415dee070a1de957bb5bf5921d8df3499affected
  • 18d28819809909c3f24bb72183a901c5e332a63d to < 25a1433216489de4abc889910f744e952cb6dbaeaffected

Linux Linux

Default version status: affected

  • 4.7affected
  • 0 to < 4.7unaffected
  • 4.9.285 to ≤ 4.9.*unaffected
  • 4.14.249 to ≤ 4.14.*unaffected
  • 4.19.209 to ≤ 4.19.*unaffected
  • 5.4.150 to ≤ 5.4.*unaffected
  • 5.10.70 to ≤ 5.10.*unaffected
  • 5.14.9 to ≤ 5.14.*unaffected
  • 5.15 to ≤ *unaffected

References