2024-05-22 07:00:37 +00:00
{
2024-05-22 09:00:34 +00:00
"data_version" : "4.0" ,
2024-05-22 07:00:37 +00:00
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"CVE_data_meta" : {
"ID" : "CVE-2021-47483" ,
2024-05-22 09:00:34 +00:00
"ASSIGNER" : "cve@kernel.org" ,
"STATE" : "PUBLIC"
2024-05-22 07:00:37 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2024-05-22 09:00:34 +00:00
"value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nregmap: Fix possible double-free in regcache_rbtree_exit()\n\nIn regcache_rbtree_insert_to_block(), when 'present' realloc failed,\nthe 'blk' which is supposed to assign to 'rbnode->block' will be freed,\nso 'rbnode->block' points a freed memory, in the error handling path of\nregcache_rbtree_init(), 'rbnode->block' will be freed again in\nregcache_rbtree_exit(), KASAN will report double-free as follows:\n\nBUG: KASAN: double-free or invalid-free in kfree+0xce/0x390\nCall Trace:\n slab_free_freelist_hook+0x10d/0x240\n kfree+0xce/0x390\n regcache_rbtree_exit+0x15d/0x1a0\n regcache_rbtree_init+0x224/0x2c0\n regcache_init+0x88d/0x1310\n __regmap_init+0x3151/0x4a80\n __devm_regmap_init+0x7d/0x100\n madera_spi_probe+0x10f/0x333 [madera_spi]\n spi_probe+0x183/0x210\n really_probe+0x285/0xc30\n\nTo fix this, moving up the assignment of rbnode->block to immediately after\nthe reallocation has succeeded so that the data structure stays valid even\nif the second reallocation fails."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
2024-05-22 07:00:37 +00:00
}
]
2024-05-22 09:00:34 +00:00
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "Linux" ,
"product" : {
"product_data" : [
{
"product_name" : "Linux" ,
"version" : {
"version_data" : [
{
"version_affected" : "<" ,
"version_name" : "3f4ff561bc88" ,
"version_value" : "e72dce9afbdb"
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "3.12" ,
"status" : "affected"
} ,
{
"version" : "0" ,
"lessThan" : "3.12" ,
"status" : "unaffected" ,
2024-11-04 12:02:05 +00:00
"versionType" : "semver"
2024-05-22 09:00:34 +00:00
} ,
{
"version" : "4.4.291" ,
"lessThanOrEqual" : "4.4.*" ,
"status" : "unaffected" ,
2024-11-04 12:02:05 +00:00
"versionType" : "semver"
2024-05-22 09:00:34 +00:00
} ,
{
"version" : "4.9.289" ,
"lessThanOrEqual" : "4.9.*" ,
"status" : "unaffected" ,
2024-11-04 12:02:05 +00:00
"versionType" : "semver"
2024-05-22 09:00:34 +00:00
} ,
{
"version" : "4.14.254" ,
"lessThanOrEqual" : "4.14.*" ,
"status" : "unaffected" ,
2024-11-04 12:02:05 +00:00
"versionType" : "semver"
2024-05-22 09:00:34 +00:00
} ,
{
"version" : "4.19.215" ,
"lessThanOrEqual" : "4.19.*" ,
"status" : "unaffected" ,
2024-11-04 12:02:05 +00:00
"versionType" : "semver"
2024-05-22 09:00:34 +00:00
} ,
{
"version" : "5.4.157" ,
"lessThanOrEqual" : "5.4.*" ,
"status" : "unaffected" ,
2024-11-04 12:02:05 +00:00
"versionType" : "semver"
2024-05-22 09:00:34 +00:00
} ,
{
"version" : "5.10.77" ,
"lessThanOrEqual" : "5.10.*" ,
"status" : "unaffected" ,
2024-11-04 12:02:05 +00:00
"versionType" : "semver"
2024-05-22 09:00:34 +00:00
} ,
{
"version" : "5.14.16" ,
"lessThanOrEqual" : "5.14.*" ,
"status" : "unaffected" ,
2024-11-04 12:02:05 +00:00
"versionType" : "semver"
2024-05-22 09:00:34 +00:00
} ,
{
"version" : "5.15" ,
"lessThanOrEqual" : "*" ,
"status" : "unaffected" ,
2024-11-04 13:02:23 +00:00
"versionType" : "original_commit_for_fix"
2024-05-22 09:00:34 +00:00
}
] ,
"defaultStatus" : "affected"
}
}
]
}
}
]
}
}
]
}
} ,
"references" : {
"reference_data" : [
{
"url" : "https://git.kernel.org/stable/c/e72dce9afbdbfa70d9b44f5908a50ff6c4858999" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/e72dce9afbdbfa70d9b44f5908a50ff6c4858999"
} ,
{
"url" : "https://git.kernel.org/stable/c/fc081477b47dfc3a6cb50a96087fc29674013fc2" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/fc081477b47dfc3a6cb50a96087fc29674013fc2"
} ,
{
"url" : "https://git.kernel.org/stable/c/758ced2c3878ff789801e6fee808e185c5cf08d6" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/758ced2c3878ff789801e6fee808e185c5cf08d6"
} ,
{
"url" : "https://git.kernel.org/stable/c/3dae1a4eced3ee733d7222e69b8a55caf2d61091" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/3dae1a4eced3ee733d7222e69b8a55caf2d61091"
} ,
{
"url" : "https://git.kernel.org/stable/c/1cead23c1c0bc766dacb900a3b0269f651ad596f" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/1cead23c1c0bc766dacb900a3b0269f651ad596f"
} ,
{
"url" : "https://git.kernel.org/stable/c/36e911a16b377bde0ad91a8c679069d0d310b1a6" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/36e911a16b377bde0ad91a8c679069d0d310b1a6"
} ,
{
"url" : "https://git.kernel.org/stable/c/50cc1462a668dc62949a1127388bc3af785ce047" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/50cc1462a668dc62949a1127388bc3af785ce047"
} ,
{
"url" : "https://git.kernel.org/stable/c/55e6d8037805b3400096d621091dfbf713f97e83" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/55e6d8037805b3400096d621091dfbf713f97e83"
}
]
} ,
"generator" : {
2024-11-04 13:02:23 +00:00
"engine" : "bippy-9e1c9544281a"
2024-05-22 07:00:37 +00:00
}
}
