In the Linux kernel, the following vulnerability has been resolved:
net/smc: remove device from smcd_dev_list after failed device_add()
If the device_add() for a smcd_dev fails, there's no cleanup step that
rolls back the earlier list_add(). The device subsequently gets freed,
and we end up with a corrupted list.
Add some error handling that removes the device from the list.
Metrics
Affected Vendors & Products
References
History
Wed, 11 Sep 2024 18:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Wed, 11 Sep 2024 13:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: Linux
Published: 2024-03-25T09:07:41.075Z
Updated: 2024-11-04T12:00:19.081Z
Reserved: 2024-03-04T18:12:48.844Z
Link: CVE-2021-47143
Vulnrichment
Updated: 2024-08-04T05:24:40.199Z
NVD
Status : Awaiting Analysis
Published: 2024-03-25T09:15:08.900
Modified: 2024-03-25T13:47:14.087
Link: CVE-2021-47143
Redhat