Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2021-47372

HistoryMay 21, 2024 - 3:15 p.m.

CVE-2021-47372

2024-05-2115:15:23

Debian Security Bug Tracker

security-tracker.debian.org

linux

kernel

net

macb

use after free

vulnerability

resolved

AI Score

7.2

Confidence

High

EPSS

Percentile

10.3%

JSON

In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use after free on rmmod plat_dev->dev->platform_data is released by platform_device_unregister(), use of pclk and hclk is a use-after-free. Since device unregister won’t need a clk device we adjust the function call sequence to fix this issue. [ 31.261225] BUG: KASAN: use-after-free in macb_remove+0x77/0xc6 [macb_pci] [ 31.275563] Freed by task 306: [ 30.276782] platform_device_release+0x25/0x80

OSVersionArchitecturePackageVersionFilename
Debian12alllinux< 5.14.9-1linux_5.14.9-1_all.deb
Debian11alllinux< 5.10.70-1linux_5.10.70-1_all.deb
Debian999alllinux< 5.14.9-1linux_5.14.9-1_all.deb
Debian13alllinux< 5.14.9-1linux_5.14.9-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	< 5.14.9-1	linux_5.14.9-1_all.deb
Debian	11	all	linux	< 5.10.70-1	linux_5.10.70-1_all.deb
Debian	999	all	linux	< 5.14.9-1	linux_5.14.9-1_all.deb
Debian	13	all	linux	< 5.14.9-1	linux_5.14.9-1_all.deb