In the Linux kernel, the following vulnerability has been resolved:

staging: greybus: uart: fix tty use after free

User space can hold a tty open indefinitely and tty drivers must not
release the underlying structures until the last user is gone.

Switch to using the tty-port reference counter to manage the life time
of the greybus tty state to avoid use after free after a disconnect.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00016.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
a18e15175708d39abbe9746ddc3479466b7800c3 affected
< 92b67aaafb7c449db9f0c3dcabc0ff967cb3a42d
a18e15175708d39abbe9746ddc3479466b7800c3 affected
< 64062fcaca8872f063ec9da011e7bf30470be33f
a18e15175708d39abbe9746ddc3479466b7800c3 affected
< a5cfd51f6348e8fd7531461366946039c29c7e69
a18e15175708d39abbe9746ddc3479466b7800c3 affected
< 4dc56951a8d9d61d364d346c61a5f1d70b4f5e14
a18e15175708d39abbe9746ddc3479466b7800c3 affected
< b9e697e60ce9890e9258a73eb061288e7d68e5e6
a18e15175708d39abbe9746ddc3479466b7800c3 affected
< 9872ff6fdce8b229f01993b611b5d1719cb70ff1
a18e15175708d39abbe9746ddc3479466b7800c3 affected
< 92dc0b1f46e12cfabd28d709bb34f7a39431b44f
Linux Linux affected
Version Status Constraints
4.9 affected
—
0 unaffected
< 4.9
4.9.285 unaffected
≤ 4.9.*
4.14.249 unaffected
≤ 4.14.*
4.19.209 unaffected
≤ 4.19.*
5.4.150 unaffected
≤ 5.4.*
5.10.70 unaffected
≤ 5.10.*
5.14.9 unaffected
≤ 5.14.*
5.15 unaffected
≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/4dc56951a8d9d61d364d346c61a5f1d70b4f5e14 cve-icon cve-icon
https://git.kernel.org/stable/c/64062fcaca8872f063ec9da011e7bf30470be33f cve-icon cve-icon
https://git.kernel.org/stable/c/92b67aaafb7c449db9f0c3dcabc0ff967cb3a42d cve-icon cve-icon
https://git.kernel.org/stable/c/92dc0b1f46e12cfabd28d709bb34f7a39431b44f cve-icon cve-icon
https://git.kernel.org/stable/c/9872ff6fdce8b229f01993b611b5d1719cb70ff1 cve-icon cve-icon
https://git.kernel.org/stable/c/a5cfd51f6348e8fd7531461366946039c29c7e69 cve-icon cve-icon
https://git.kernel.org/stable/c/b9e697e60ce9890e9258a73eb061288e7d68e5e6 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024052151-CVE-2021-47358-3a8d@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2021-47358 cve-icon
https://www.cve.org/CVERecord?id=CVE-2021-47358 cve-icon
History

Thu, 26 Dec 2024 20:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Thu, 29 Aug 2024 14:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Important

 cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T07:09:18.414Z

Reserved: 2024-05-21T14:28:16.988Z

Link: CVE-2021-47358

cve-icon Vulnrichment

Updated: 2024-08-04T05:32:08.651Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-21T15:15:22.073

Modified: 2024-12-26T19:31:16.863

Link: CVE-2021-47358

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2021-47358 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses