CVE-2021-47048
published 2024-02-28CVE-2021-47048: In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op When handling op->addr, it…
PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.24%
15.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op
When handling op->addr, it is using the buffer "tmpbuf" which has been
freed. This will trigger a use-after-free KASAN warning. Let's use
temporary variables to store op->addr.val and op->cmd.opcode to fix
this issue.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.10.38-1 (bookworm) | linux 5.10.38-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 1c26372e5aa9e53391a1f8fe0dc7cd93a7e5ba9e < 1231279389b5e638bc3b66b9741c94077aed4b5a | 1231279389b5e638bc3b66b9741c94077aed4b5a |
| linux | linux | >= 1c26372e5aa9e53391a1f8fe0dc7cd93a7e5ba9e < d67e0d6bd92ebbb0294e7062bbf5cdc773764e62 | d67e0d6bd92ebbb0294e7062bbf5cdc773764e62 |
| linux | linux | >= 1c26372e5aa9e53391a1f8fe0dc7cd93a7e5ba9e < 23269ac9f123eca3aea7682d3345c02e71ed696c | 23269ac9f123eca3aea7682d3345c02e71ed696c |
| linux | linux | >= 1c26372e5aa9e53391a1f8fe0dc7cd93a7e5ba9e < a2c5bedb2d55dd27c642c7b9fb6886d7ad7bdb58 | a2c5bedb2d55dd27c642c7b9fb6886d7ad7bdb58 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 5.10 < 5.10.37 | 5.10.37 |
| linux | linux_kernel | >= 5.11 < 5.11.21 | 5.11.21 |
| linux | linux_kernel | >= 5.12 < 5.12.4 | 5.12.4 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op
vendor_redhat·2024-02-28·CVSS 7.8
CVE-2021-47048 [HIGH] CWE-416 kernel: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op
kernel: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op
In the Linux kernel, the following vulnerability has been resolved:
spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op
When handling op->addr, it is using the buffer "tmpbuf" which has been
freed. This will trigger a use-after-free KASAN warning. Let's use
temporary variables to store op->addr.val and op->cmd.opcode to fix
this issue.
Statement: No Red Hat products are affected by this flaw, as the Xilinx ZynqMP GQSPI controller (CONFIG_SPI_ZYNQMP_GQSPI) is not enabled in any shipping kernel release.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (R
Debian
CVE-2021-47048: linux - In the Linux kernel, the following vulnerability has been resolved: spi: spi-zy...
vendor_debian·2021·CVSS 7.8
CVE-2021-47048 [HIGH] CVE-2021-47048: linux - In the Linux kernel, the following vulnerability has been resolved: spi: spi-zy...
In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op When handling op->addr, it is using the buffer "tmpbuf" which has been freed. This will trigger a use-after-free KASAN warning. Let's use temporary variables to store op->addr.val and op->cmd.opcode to fix this issue.
Scope: local
bookworm: resolved (fixed in 5.10.38-1)
bullseye: resolved (fixed in 5.10.38-1)
forky: resolved (fixed in 5.10.38-1)
sid: resolved (fixed in 5.10.38-1)
trixie: resolved (fixed in 5.10.38-1)
GHSA
GHSA-hhq7-4gxq-q8mp: In the Linux kernel, the following vulnerability has been resolved:
spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op
When handling o
ghsa_unreviewed·2024-02-28
CVE-2021-47048 [HIGH] CWE-416 GHSA-hhq7-4gxq-q8mp: In the Linux kernel, the following vulnerability has been resolved:
spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op
When handling o
In the Linux kernel, the following vulnerability has been resolved:
spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op
When handling op->addr, it is using the buffer "tmpbuf" which has been
freed. This will trigger a use-after-free KASAN warning. Let's use
temporary variables to store op->addr.val and op->cmd.opcode to fix
this issue.
OSV
CVE-2021-47048: In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op When handling op-
osv·2024-02-28·CVSS 7.8
CVE-2021-47048 [HIGH] CVE-2021-47048: In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op When handling op-
In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op When handling op->addr, it is using the buffer "tmpbuf" which has been freed. This will trigger a use-after-free KASAN warning. Let's use temporary variables to store op->addr.val and op->cmd.opcode to fix this issue.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/1231279389b5e638bc3b66b9741c94077aed4b5ahttps://git.kernel.org/stable/c/23269ac9f123eca3aea7682d3345c02e71ed696chttps://git.kernel.org/stable/c/a2c5bedb2d55dd27c642c7b9fb6886d7ad7bdb58https://git.kernel.org/stable/c/d67e0d6bd92ebbb0294e7062bbf5cdc773764e62https://git.kernel.org/stable/c/1231279389b5e638bc3b66b9741c94077aed4b5ahttps://git.kernel.org/stable/c/23269ac9f123eca3aea7682d3345c02e71ed696chttps://git.kernel.org/stable/c/a2c5bedb2d55dd27c642c7b9fb6886d7ad7bdb58https://git.kernel.org/stable/c/d67e0d6bd92ebbb0294e7062bbf5cdc773764e62
2024-02-28
Published