CVE-2021-47525 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: serial: liteuart: fix use-after-free and memleak on unbind Deregister the port when unbinding the driver to prevent it from being used after releasing the driver data and leaking memory allocated by serial core.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

Configuration 1 [-]

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://git.kernel.org/stable/c/05f929b395dec8957b636ff14e66b277ed022ed9
https://git.kernel.org/stable/c/602824cf9aa9db8830ffe5cfb2cd54365cada4fe
https://lore.kernel.org/linux-cve-announce/2024052434-CVE-2021-47525-2b58@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2021-47525
https://www.cve.org/CVERecord?id=CVE-2021-47525

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-24T15:09:37.355Z

Updated: 2024-08-04T05:39:59.831Z

Reserved: 2024-05-24T15:02:54.825Z

Link: CVE-2021-47525

Vulnrichment

Updated: 2024-08-04T05:39:59.831Z

NVD

Status : Analyzed

Published: 2024-05-24T15:15:15.167

Modified: 2024-06-10T18:41:12.207

Link: CVE-2021-47525

Redhat

Severity : Low

Publid Date: 2024-05-24T00:00:00Z

Links: CVE-2021-47525 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47525", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-24T15:02:54.825Z", "datePublished": "2024-05-24T15:09:37.355Z", "dateUpdated": "2024-08-04T05:39:59.831Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:09:28.377Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: liteuart: fix use-after-free and memleak on unbind\n\nDeregister the port when unbinding the driver to prevent it from being\nused after releasing the driver data and leaking memory allocated by\nserial core."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/tty/serial/liteuart.c"], "versions": [{"version": "1da81e5562fa", "lessThan": "602824cf9aa9", "status": "affected", "versionType": "git"}, {"version": "1da81e5562fa", "lessThan": "05f929b395de", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/tty/serial/liteuart.c"], "versions": [{"version": "5.11", "status": "affected"}, {"version": "0", "lessThan": "5.11", "status": "unaffected", "versionType": "custom"}, {"version": "5.15.7", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.16", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/602824cf9aa9db8830ffe5cfb2cd54365cada4fe"}, {"url": "https://git.kernel.org/stable/c/05f929b395dec8957b636ff14e66b277ed022ed9"}], "title": "serial: liteuart: fix use-after-free and memleak on unbind", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47525", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-28T15:21:08.763793Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:14:59.157Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:39:59.831Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/602824cf9aa9db8830ffe5cfb2cd54365cada4fe", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/05f929b395dec8957b636ff14e66b277ed022ed9", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/602824cf9aa9db8830ffe5cfb2cd54365cada4fe", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/05f929b395dec8957b636ff14e66b277ed022ed9", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:39:59.831Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47525", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-28T15:21:08.763793Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-28T15:21:14.105Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "serial: liteuart: fix use-after-free and memleak on unbind", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1da81e5562fa", "lessThan": "602824cf9aa9", "versionType": "git"}, {"status": "affected", "version": "1da81e5562fa", "lessThan": "05f929b395de", "versionType": "git"}], "programFiles": ["drivers/tty/serial/liteuart.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.11"}, {"status": "unaffected", "version": "0", "lessThan": "5.11", "versionType": "custom"}, {"status": "unaffected", "version": "5.15.7", "versionType": "custom", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "5.16", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/tty/serial/liteuart.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/602824cf9aa9db8830ffe5cfb2cd54365cada4fe"}, {"url": "https://git.kernel.org/stable/c/05f929b395dec8957b636ff14e66b277ed022ed9"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: liteuart: fix use-after-free and memleak on unbind\n\nDeregister the port when unbinding the driver to prevent it from being\nused after releasing the driver data and leaking memory allocated by\nserial core."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:09:28.377Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47525", "state": "PUBLISHED", "dateUpdated": "2024-08-04T05:39:59.831Z", "dateReserved": "2024-05-24T15:02:54.825Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-24T15:09:37.355Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}