CVE-2021-47205 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: Unregister clocks/resets when unbinding Currently, unbinding a CCU driver unmaps the device's MMIO region, while leaving its clocks/resets and their providers registered. This can cause a page fault later when some clock operation tries to perform MMIO. Fix this by separating the CCU initialization from the memory allocation, and then using a devres callback to unregister the clocks and resets. This also fixes a memory leak of the `struct ccu_reset`, and uses the correct owner (the specific platform driver) for the clocks and resets. Early OF clock providers are never unregistered, and limited error handling is possible, so they are mostly unchanged. The error reporting is made more consistent by moving the message inside of_sunxi_ccu_probe.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/9bec2b9c6134052994115d2d3374e96f2ccb9b9d
https://git.kernel.org/stable/c/b5dd513daa70ee8f6d281a20bd28485ee9bb7db2
https://lore.kernel.org/linux-cve-announce/2024041038-CVE-2021-47205-3f43@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2021-47205
https://www.cve.org/CVERecord?id=CVE-2021-47205

History

Mon, 04 Nov 2024 12:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-04-10T18:56:38.347Z

Updated: 2024-11-04T12:01:29.961Z

Reserved: 2024-03-25T09:12:14.117Z

Link: CVE-2021-47205

Vulnrichment

Updated: 2024-08-04T05:32:07.375Z

NVD

Status : Awaiting Analysis

Published: 2024-04-10T19:15:48.310

Modified: 2024-04-10T19:49:51.183

Link: CVE-2021-47205

Redhat

Severity : Low

Publid Date: 2024-04-10T00:00:00Z

Links: CVE-2021-47205 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47205", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-03-25T09:12:14.117Z", "datePublished": "2024-04-10T18:56:38.347Z", "dateUpdated": "2024-11-04T12:01:29.961Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T12:01:29.961Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: sunxi-ng: Unregister clocks/resets when unbinding\n\nCurrently, unbinding a CCU driver unmaps the device's MMIO region, while\nleaving its clocks/resets and their providers registered. This can cause\na page fault later when some clock operation tries to perform MMIO. Fix\nthis by separating the CCU initialization from the memory allocation,\nand then using a devres callback to unregister the clocks and resets.\n\nThis also fixes a memory leak of the `struct ccu_reset`, and uses the\ncorrect owner (the specific platform driver) for the clocks and resets.\n\nEarly OF clock providers are never unregistered, and limited error\nhandling is possible, so they are mostly unchanged. The error reporting\nis made more consistent by moving the message inside of_sunxi_ccu_probe."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/clk/sunxi-ng/ccu-sun4i-a10.c", "drivers/clk/sunxi-ng/ccu-sun50i-a100-r.c", "drivers/clk/sunxi-ng/ccu-sun50i-a100.c", "drivers/clk/sunxi-ng/ccu-sun50i-a64.c", "drivers/clk/sunxi-ng/ccu-sun50i-h6-r.c", "drivers/clk/sunxi-ng/ccu-sun50i-h6.c", "drivers/clk/sunxi-ng/ccu-sun50i-h616.c", "drivers/clk/sunxi-ng/ccu-sun5i.c", "drivers/clk/sunxi-ng/ccu-sun6i-a31.c", "drivers/clk/sunxi-ng/ccu-sun8i-a23.c", "drivers/clk/sunxi-ng/ccu-sun8i-a33.c", "drivers/clk/sunxi-ng/ccu-sun8i-a83t.c", "drivers/clk/sunxi-ng/ccu-sun8i-de2.c", "drivers/clk/sunxi-ng/ccu-sun8i-h3.c", "drivers/clk/sunxi-ng/ccu-sun8i-r.c", "drivers/clk/sunxi-ng/ccu-sun8i-r40.c", "drivers/clk/sunxi-ng/ccu-sun8i-v3s.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80-de.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80-usb.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80.c", "drivers/clk/sunxi-ng/ccu-suniv-f1c100s.c", "drivers/clk/sunxi-ng/ccu_common.c", "drivers/clk/sunxi-ng/ccu_common.h"], "versions": [{"version": "1da177e4c3f4", "lessThan": "b5dd513daa70", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "9bec2b9c6134", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/clk/sunxi-ng/ccu-sun4i-a10.c", "drivers/clk/sunxi-ng/ccu-sun50i-a100-r.c", "drivers/clk/sunxi-ng/ccu-sun50i-a100.c", "drivers/clk/sunxi-ng/ccu-sun50i-a64.c", "drivers/clk/sunxi-ng/ccu-sun50i-h6-r.c", "drivers/clk/sunxi-ng/ccu-sun50i-h6.c", "drivers/clk/sunxi-ng/ccu-sun50i-h616.c", "drivers/clk/sunxi-ng/ccu-sun5i.c", "drivers/clk/sunxi-ng/ccu-sun6i-a31.c", "drivers/clk/sunxi-ng/ccu-sun8i-a23.c", "drivers/clk/sunxi-ng/ccu-sun8i-a33.c", "drivers/clk/sunxi-ng/ccu-sun8i-a83t.c", "drivers/clk/sunxi-ng/ccu-sun8i-de2.c", "drivers/clk/sunxi-ng/ccu-sun8i-h3.c", "drivers/clk/sunxi-ng/ccu-sun8i-r.c", "drivers/clk/sunxi-ng/ccu-sun8i-r40.c", "drivers/clk/sunxi-ng/ccu-sun8i-v3s.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80-de.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80-usb.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80.c", "drivers/clk/sunxi-ng/ccu-suniv-f1c100s.c", "drivers/clk/sunxi-ng/ccu_common.c", "drivers/clk/sunxi-ng/ccu_common.h"], "versions": [{"version": "5.15.5", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.16", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/b5dd513daa70ee8f6d281a20bd28485ee9bb7db2"}, {"url": "https://git.kernel.org/stable/c/9bec2b9c6134052994115d2d3374e96f2ccb9b9d"}], "title": "clk: sunxi-ng: Unregister clocks/resets when unbinding", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47205", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-12T16:35:34.459047Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:13:34.061Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:32:07.375Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/b5dd513daa70ee8f6d281a20bd28485ee9bb7db2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/9bec2b9c6134052994115d2d3374e96f2ccb9b9d", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/b5dd513daa70ee8f6d281a20bd28485ee9bb7db2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/9bec2b9c6134052994115d2d3374e96f2ccb9b9d", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:32:07.375Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47205", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-12T16:35:34.459047Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:23.553Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "clk: sunxi-ng: Unregister clocks/resets when unbinding", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1da177e4c3f4", "lessThan": "b5dd513daa70", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "9bec2b9c6134", "versionType": "git"}], "programFiles": ["drivers/clk/sunxi-ng/ccu-sun4i-a10.c", "drivers/clk/sunxi-ng/ccu-sun50i-a100-r.c", "drivers/clk/sunxi-ng/ccu-sun50i-a100.c", "drivers/clk/sunxi-ng/ccu-sun50i-a64.c", "drivers/clk/sunxi-ng/ccu-sun50i-h6-r.c", "drivers/clk/sunxi-ng/ccu-sun50i-h6.c", "drivers/clk/sunxi-ng/ccu-sun50i-h616.c", "drivers/clk/sunxi-ng/ccu-sun5i.c", "drivers/clk/sunxi-ng/ccu-sun6i-a31.c", "drivers/clk/sunxi-ng/ccu-sun8i-a23.c", "drivers/clk/sunxi-ng/ccu-sun8i-a33.c", "drivers/clk/sunxi-ng/ccu-sun8i-a83t.c", "drivers/clk/sunxi-ng/ccu-sun8i-de2.c", "drivers/clk/sunxi-ng/ccu-sun8i-h3.c", "drivers/clk/sunxi-ng/ccu-sun8i-r.c", "drivers/clk/sunxi-ng/ccu-sun8i-r40.c", "drivers/clk/sunxi-ng/ccu-sun8i-v3s.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80-de.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80-usb.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80.c", "drivers/clk/sunxi-ng/ccu-suniv-f1c100s.c", "drivers/clk/sunxi-ng/ccu_common.c", "drivers/clk/sunxi-ng/ccu_common.h"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "unaffected", "version": "5.15.5", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "5.16", "versionType": "semver", "lessThanOrEqual": "*"}], "programFiles": ["drivers/clk/sunxi-ng/ccu-sun4i-a10.c", "drivers/clk/sunxi-ng/ccu-sun50i-a100-r.c", "drivers/clk/sunxi-ng/ccu-sun50i-a100.c", "drivers/clk/sunxi-ng/ccu-sun50i-a64.c", "drivers/clk/sunxi-ng/ccu-sun50i-h6-r.c", "drivers/clk/sunxi-ng/ccu-sun50i-h6.c", "drivers/clk/sunxi-ng/ccu-sun50i-h616.c", "drivers/clk/sunxi-ng/ccu-sun5i.c", "drivers/clk/sunxi-ng/ccu-sun6i-a31.c", "drivers/clk/sunxi-ng/ccu-sun8i-a23.c", "drivers/clk/sunxi-ng/ccu-sun8i-a33.c", "drivers/clk/sunxi-ng/ccu-sun8i-a83t.c", "drivers/clk/sunxi-ng/ccu-sun8i-de2.c", "drivers/clk/sunxi-ng/ccu-sun8i-h3.c", "drivers/clk/sunxi-ng/ccu-sun8i-r.c", "drivers/clk/sunxi-ng/ccu-sun8i-r40.c", "drivers/clk/sunxi-ng/ccu-sun8i-v3s.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80-de.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80-usb.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80.c", "drivers/clk/sunxi-ng/ccu-suniv-f1c100s.c", "drivers/clk/sunxi-ng/ccu_common.c", "drivers/clk/sunxi-ng/ccu_common.h"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/b5dd513daa70ee8f6d281a20bd28485ee9bb7db2"}, {"url": "https://git.kernel.org/stable/c/9bec2b9c6134052994115d2d3374e96f2ccb9b9d"}], "x_generator": {"engine": "bippy-c8e10e5f6187"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: sunxi-ng: Unregister clocks/resets when unbinding\n\nCurrently, unbinding a CCU driver unmaps the device's MMIO region, while\nleaving its clocks/resets and their providers registered. This can cause\na page fault later when some clock operation tries to perform MMIO. Fix\nthis by separating the CCU initialization from the memory allocation,\nand then using a devres callback to unregister the clocks and resets.\n\nThis also fixes a memory leak of the `struct ccu_reset`, and uses the\ncorrect owner (the specific platform driver) for the clocks and resets.\n\nEarly OF clock providers are never unregistered, and limited error\nhandling is possible, so they are mostly unchanged. The error reporting\nis made more consistent by moving the message inside of_sunxi_ccu_probe."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T11:36:47.476Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47205", "state": "PUBLISHED", "dateUpdated": "2024-11-04T11:36:47.476Z", "dateReserved": "2024-03-25T09:12:14.117Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-04-10T18:56:38.347Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"bugzilla": {"description": "kernel: clk: sunxi-ng: Unregister clocks/resets when unbinding", "id": "2274632", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274632"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H", "status": "draft"}, "cwe": "CWE-402", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nclk: sunxi-ng: Unregister clocks/resets when unbinding\nCurrently, unbinding a CCU driver unmaps the device's MMIO region, while\nleaving its clocks/resets and their providers registered. This can cause\na page fault later when some clock operation tries to perform MMIO. Fix\nthis by separating the CCU initialization from the memory allocation,\nand then using a devres callback to unregister the clocks and resets.\nThis also fixes a memory leak of the `struct ccu_reset`, and uses the\ncorrect owner (the specific platform driver) for the clocks and resets.\nEarly OF clock providers are never unregistered, and limited error\nhandling is possible, so they are mostly unchanged. The error reporting\nis made more consistent by moving the message inside of_sunxi_ccu_probe."], "name": "CVE-2021-47205", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-04-10T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-47205\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-47205\nhttps://lore.kernel.org/linux-cve-announce/2024041038-CVE-2021-47205-3f43@gregkh/T"], "threat_severity": "Low", "upstream_fix": "kernel 5.15.5, kernel 5.16"}