CVE-2021-47195
published 2024-04-10CVE-2021-47195: In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free of the add_lock mutex Commit 6098475d4cb4 ("spi: Fix deadlock when…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
12.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
spi: fix use-after-free of the add_lock mutex
Commit 6098475d4cb4 ("spi: Fix deadlock when adding SPI controllers on
SPI buses") introduced a per-controller mutex. But mutex_unlock() of
said lock is called after the controller is already freed:
spi_unregister_controller(ctlr)
-> put_device(&ctlr->dev)
-> spi_controller_release(dev)
-> mutex_unlock(&ctrl->add_lock)
Move the put_device() after the mutex_unlock().
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.15.5-1 (bookworm) | linux 5.15.5-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 5.14.15 < 5.15 | 5.15 |
| linux | linux | >= 6098475d4cb48d821bdf453c61118c56e26294f0 < 37330f37f6666c7739a44b2b6b95b047ccdbed2d | 37330f37f6666c7739a44b2b6b95b047ccdbed2d |
| linux | linux | >= 6098475d4cb48d821bdf453c61118c56e26294f0 < 6c53b45c71b4920b5e62f0ea8079a1da382b9434 | 6c53b45c71b4920b5e62f0ea8079a1da382b9434 |
| linux | linux | >= aa3f3d7bef59583f2d3234173105a27ff61ef8fe < 54c2c96eafcfd242e52e932ab54ace4784efe1dd | 54c2c96eafcfd242e52e932ab54ace4784efe1dd |
| linux | linux | >= c8dce228db6f81dbc897a018dfc5c418e917cf64 < 11eab327a2a8bd36c38afbff920ae1bd45588dd4 | 11eab327a2a8bd36c38afbff920ae1bd45588dd4 |
| linux | linux_kernel | < 5.15.5 | 5.15.5 |
| linux | linux_kernel | >= 0 < 5.15.5-1 | 5.15.5-1 |
| linux | linux_kernel | >= 0 < 5.15.5-1 | 5.15.5-1 |
| linux | linux_kernel | >= 0 < 5.15.5-1 | 5.15.5-1 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-q34q-mrch-vm2x: In the Linux kernel, the following vulnerability has been resolved:
spi: fix use-after-free of the add_lock mutex
Commit 6098475d4cb4 ("spi: Fix dea
ghsa_unreviewed·2024-04-10
CVE-2021-47195 [MEDIUM] CWE-416 GHSA-q34q-mrch-vm2x: In the Linux kernel, the following vulnerability has been resolved:
spi: fix use-after-free of the add_lock mutex
Commit 6098475d4cb4 ("spi: Fix dea
In the Linux kernel, the following vulnerability has been resolved:
spi: fix use-after-free of the add_lock mutex
Commit 6098475d4cb4 ("spi: Fix deadlock when adding SPI controllers on
SPI buses") introduced a per-controller mutex. But mutex_unlock() of
said lock is called after the controller is already freed:
spi_unregister_controller(ctlr)
-> put_device(&ctlr->dev)
-> spi_controller_release(dev)
-> mutex_unlock(&ctrl->add_lock)
Move the put_device() after the mutex_unlock().
OSV
CVE-2021-47195: In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free of the add_lock mutex Commit 6098475d4cb4 ("spi: Fix deadl
osv·2024-04-10·CVSS 5.5
CVE-2021-47195 [MEDIUM] CVE-2021-47195: In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free of the add_lock mutex Commit 6098475d4cb4 ("spi: Fix deadl
In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free of the add_lock mutex Commit 6098475d4cb4 ("spi: Fix deadlock when adding SPI controllers on SPI buses") introduced a per-controller mutex. But mutex_unlock() of said lock is called after the controller is already freed: spi_unregister_controller(ctlr) -> put_device(&ctlr->dev) -> spi_controller_release(dev) -> mutex_unlock(&ctrl->add_lock) Move the put_device() after the mutex_unlock().
Red Hat
kernel: spi: fix use-after-free of the add_lock mutex
vendor_redhat·2024-04-10·CVSS 5.5
CVE-2021-47195 [MEDIUM] CWE-416 kernel: spi: fix use-after-free of the add_lock mutex
kernel: spi: fix use-after-free of the add_lock mutex
In the Linux kernel, the following vulnerability has been resolved:
spi: fix use-after-free of the add_lock mutex
Commit 6098475d4cb4 ("spi: Fix deadlock when adding SPI controllers on
SPI buses") introduced a per-controller mutex. But mutex_unlock() of
said lock is called after the controller is already freed:
spi_unregister_controller(ctlr)
-> put_device(&ctlr->dev)
-> spi_controller_release(dev)
-> mutex_unlock(&ctrl->add_lock)
Move the put_device() after the mutex_unlock().
A use-after-free of the add_lock mutex was found in drivers/spi/spi.c.in the Linux kernel.
Statement: Red Hat Enterprise Linux 8 and 9 are not affected by this vulnerability.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Ha
Debian
CVE-2021-47195: linux - In the Linux kernel, the following vulnerability has been resolved: spi: fix us...
vendor_debian·2021·CVSS 5.5
CVE-2021-47195 [MEDIUM] CVE-2021-47195: linux - In the Linux kernel, the following vulnerability has been resolved: spi: fix us...
In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free of the add_lock mutex Commit 6098475d4cb4 ("spi: Fix deadlock when adding SPI controllers on SPI buses") introduced a per-controller mutex. But mutex_unlock() of said lock is called after the controller is already freed: spi_unregister_controller(ctlr) -> put_device(&ctlr->dev) -> spi_controller_release(dev) -> mutex_unlock(&ctrl->add_lock) Move the put_device() after the mutex_unlock().
Scope: local
bookworm: resolved (fixed in 5.15.5-1)
bullseye: resolved
forky: resolved (fixed in 5.15.5-1)
sid: resolved (fixed in 5.15.5-1)
trixie: resolved (fixed in 5.15.5-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/11eab327a2a8bd36c38afbff920ae1bd45588dd4https://git.kernel.org/stable/c/37330f37f6666c7739a44b2b6b95b047ccdbed2dhttps://git.kernel.org/stable/c/54c2c96eafcfd242e52e932ab54ace4784efe1ddhttps://git.kernel.org/stable/c/6c53b45c71b4920b5e62f0ea8079a1da382b9434https://git.kernel.org/stable/c/37330f37f6666c7739a44b2b6b95b047ccdbed2dhttps://git.kernel.org/stable/c/6c53b45c71b4920b5e62f0ea8079a1da382b9434
2024-04-10
Published