CVE-2021-47325 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation The reference counting issue happens in several exception handling paths of arm_smmu_iova_to_phys_hard(). When those error scenarios occur, the function forgets to decrease the refcount of "smmu" increased by arm_smmu_rpm_get(), causing a refcount leak. Fix this issue by jumping to "out" label when those error scenarios occur.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/0f0c5ea09139777d90729d408b807021f2ea6492
https://git.kernel.org/stable/c/43d1aaa1965f9b58035196dac49b1e1e6c9c25eb
https://git.kernel.org/stable/c/5f9741a9a91f25c89e04b408cd61e3ab050ce24b
https://git.kernel.org/stable/c/7c8f176d6a3fa18aa0f8875da6f7c672ed2a8554
https://git.kernel.org/stable/c/b11220803ad14a2a880cc06d8e01fe2548cc85b0
https://lore.kernel.org/linux-cve-announce/2024052133-CVE-2021-47325-f4e8@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2021-47325
https://www.cve.org/CVERecord?id=CVE-2021-47325

History

Tue, 05 Nov 2024 20:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T14:35:38.498Z

Updated: 2024-11-04T12:03:43.952Z

Reserved: 2024-05-21T14:28:16.974Z

Link: CVE-2021-47325

Vulnrichment

Updated: 2024-08-04T05:32:08.511Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T15:15:19.613

Modified: 2024-05-21T16:54:26.047

Link: CVE-2021-47325

Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2021-47325 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47325", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T14:28:16.974Z", "datePublished": "2024-05-21T14:35:38.498Z", "dateUpdated": "2024-11-04T12:03:43.952Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T12:03:43.952Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation\n\nThe reference counting issue happens in several exception handling paths\nof arm_smmu_iova_to_phys_hard(). When those error scenarios occur, the\nfunction forgets to decrease the refcount of \"smmu\" increased by\narm_smmu_rpm_get(), causing a refcount leak.\n\nFix this issue by jumping to \"out\" label when those error scenarios\noccur."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iommu/arm/arm-smmu/arm-smmu.c"], "versions": [{"version": "1da177e4c3f4", "lessThan": "b11220803ad1", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "43d1aaa1965f", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "0f0c5ea09139", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "5f9741a9a91f", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "7c8f176d6a3f", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iommu/arm/arm-smmu/arm-smmu.c"], "versions": [{"version": "5.4.134", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.52", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.12.19", "lessThanOrEqual": "5.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.13.4", "lessThanOrEqual": "5.13.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.14", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/b11220803ad14a2a880cc06d8e01fe2548cc85b0"}, {"url": "https://git.kernel.org/stable/c/43d1aaa1965f9b58035196dac49b1e1e6c9c25eb"}, {"url": "https://git.kernel.org/stable/c/0f0c5ea09139777d90729d408b807021f2ea6492"}, {"url": "https://git.kernel.org/stable/c/5f9741a9a91f25c89e04b408cd61e3ab050ce24b"}, {"url": "https://git.kernel.org/stable/c/7c8f176d6a3fa18aa0f8875da6f7c672ed2a8554"}], "title": "iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47325", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-21T17:39:49.383659Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:14:36.867Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:32:08.511Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/b11220803ad14a2a880cc06d8e01fe2548cc85b0", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/43d1aaa1965f9b58035196dac49b1e1e6c9c25eb", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0f0c5ea09139777d90729d408b807021f2ea6492", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5f9741a9a91f25c89e04b408cd61e3ab050ce24b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/7c8f176d6a3fa18aa0f8875da6f7c672ed2a8554", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/b11220803ad14a2a880cc06d8e01fe2548cc85b0", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/43d1aaa1965f9b58035196dac49b1e1e6c9c25eb", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0f0c5ea09139777d90729d408b807021f2ea6492", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5f9741a9a91f25c89e04b408cd61e3ab050ce24b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/7c8f176d6a3fa18aa0f8875da6f7c672ed2a8554", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:32:08.511Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47325", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-21T17:39:49.383659Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:25.337Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1da177e4c3f4", "lessThan": "b11220803ad1", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "43d1aaa1965f", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "0f0c5ea09139", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "5f9741a9a91f", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "7c8f176d6a3f", "versionType": "git"}], "programFiles": ["drivers/iommu/arm/arm-smmu/arm-smmu.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "unaffected", "version": "5.4.134", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.52", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.12.19", "versionType": "semver", "lessThanOrEqual": "5.12.*"}, {"status": "unaffected", "version": "5.13.4", "versionType": "semver", "lessThanOrEqual": "5.13.*"}, {"status": "unaffected", "version": "5.14", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/iommu/arm/arm-smmu/arm-smmu.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/b11220803ad14a2a880cc06d8e01fe2548cc85b0"}, {"url": "https://git.kernel.org/stable/c/43d1aaa1965f9b58035196dac49b1e1e6c9c25eb"}, {"url": "https://git.kernel.org/stable/c/0f0c5ea09139777d90729d408b807021f2ea6492"}, {"url": "https://git.kernel.org/stable/c/5f9741a9a91f25c89e04b408cd61e3ab050ce24b"}, {"url": "https://git.kernel.org/stable/c/7c8f176d6a3fa18aa0f8875da6f7c672ed2a8554"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation\n\nThe reference counting issue happens in several exception handling paths\nof arm_smmu_iova_to_phys_hard(). When those error scenarios occur, the\nfunction forgets to decrease the refcount of \"smmu\" increased by\narm_smmu_rpm_get(), causing a refcount leak.\n\nFix this issue by jumping to \"out\" label when those error scenarios\noccur."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T12:03:43.952Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47325", "state": "PUBLISHED", "dateUpdated": "2024-11-04T12:03:43.952Z", "dateReserved": "2024-05-21T14:28:16.974Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-21T14:35:38.498Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}