CVE-2021-47358
published 2024-05-21CVE-2021-47358: In the Linux kernel, the following vulnerability has been resolved: staging: greybus: uart: fix tty use after free User space can hold a tty open indefinitely…
PriorityP339high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.24%
15.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
staging: greybus: uart: fix tty use after free
User space can hold a tty open indefinitely and tty drivers must not
release the underlying structures until the last user is gone.
Switch to using the tty-port reference counter to manage the life time
of the greybus tty state to avoid use after free after a disconnect.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.14.9-1 (bookworm) | linux 5.14.9-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= a18e15175708d39abbe9746ddc3479466b7800c3 < 92b67aaafb7c449db9f0c3dcabc0ff967cb3a42d | 92b67aaafb7c449db9f0c3dcabc0ff967cb3a42d |
| linux | linux | >= a18e15175708d39abbe9746ddc3479466b7800c3 < 64062fcaca8872f063ec9da011e7bf30470be33f | 64062fcaca8872f063ec9da011e7bf30470be33f |
| linux | linux | >= a18e15175708d39abbe9746ddc3479466b7800c3 < a5cfd51f6348e8fd7531461366946039c29c7e69 | a5cfd51f6348e8fd7531461366946039c29c7e69 |
| linux | linux | >= a18e15175708d39abbe9746ddc3479466b7800c3 < 4dc56951a8d9d61d364d346c61a5f1d70b4f5e14 | 4dc56951a8d9d61d364d346c61a5f1d70b4f5e14 |
| linux | linux | >= a18e15175708d39abbe9746ddc3479466b7800c3 < b9e697e60ce9890e9258a73eb061288e7d68e5e6 | b9e697e60ce9890e9258a73eb061288e7d68e5e6 |
| linux | linux | >= a18e15175708d39abbe9746ddc3479466b7800c3 < 9872ff6fdce8b229f01993b611b5d1719cb70ff1 | 9872ff6fdce8b229f01993b611b5d1719cb70ff1 |
| linux | linux | >= a18e15175708d39abbe9746ddc3479466b7800c3 < 92dc0b1f46e12cfabd28d709bb34f7a39431b44f | 92dc0b1f46e12cfabd28d709bb34f7a39431b44f |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.70-1 | 5.10.70-1 |
| linux | linux_kernel | >= 0 < 5.14.9-1 | 5.14.9-1 |
| linux | linux_kernel | >= 0 < 5.14.9-1 | 5.14.9-1 |
| linux | linux_kernel | >= 0 < 5.14.9-1 | 5.14.9-1 |
| linux | linux_kernel | >= 4.10 < 4.14.249 | 4.14.249 |
| linux | linux_kernel | >= 4.15 < 4.19.209 | 4.19.209 |
| linux | linux_kernel | >= 4.20 < 5.4.150 | 5.4.150 |
| linux | linux_kernel | >= 4.9 < 4.9.285 | 4.9.285 |
| linux | linux_kernel | >= 5.11 < 5.14.9 | 5.14.9 |
| linux | linux_kernel | >= 5.5 < 5.10.70 | 5.10.70 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: staging: greybus: uart: fix tty use after free
vendor_redhat·2024-05-21·CVSS 7.8
CVE-2021-47358 [HIGH] CWE-416 kernel: staging: greybus: uart: fix tty use after free
kernel: staging: greybus: uart: fix tty use after free
In the Linux kernel, the following vulnerability has been resolved:
staging: greybus: uart: fix tty use after free
User space can hold a tty open indefinitely and tty drivers must not
release the underlying structures until the last user is gone.
Switch to using the tty-port reference counter to manage the life time
of the greybus tty state to avoid use after free after a disconnect.
A use-after-free flaw was in the Linux kernel’s Greybus UART driver when a user held a tty open. This flaw allows a local user to crash the system.
Statement: This flaw doesn't affect any versions of Red Hat Enterprise Linux, because the kernel config param, CONFIG_GREYBUS_UART, is disabled.
Mitigation: Mitigation for this issue is either not available
Debian
CVE-2021-47358: linux - In the Linux kernel, the following vulnerability has been resolved: staging: gr...
vendor_debian·2021·CVSS 7.8
CVE-2021-47358 [HIGH] CVE-2021-47358: linux - In the Linux kernel, the following vulnerability has been resolved: staging: gr...
In the Linux kernel, the following vulnerability has been resolved: staging: greybus: uart: fix tty use after free User space can hold a tty open indefinitely and tty drivers must not release the underlying structures until the last user is gone. Switch to using the tty-port reference counter to manage the life time of the greybus tty state to avoid use after free after a disconnect.
Scope: local
bookworm: resolved (fixed in 5.14.9-1)
bullseye: resolved (fixed in 5.10.70-1)
forky: resolved (fixed in 5.14.9-1)
sid: resolved (fixed in 5.14.9-1)
trixie: resolved (fixed in 5.14.9-1)
OSV
CVE-2021-47358: In the Linux kernel, the following vulnerability has been resolved: staging: greybus: uart: fix tty use after free User space can hold a tty open inde
osv·2024-05-21·CVSS 7.8
CVE-2021-47358 [HIGH] CVE-2021-47358: In the Linux kernel, the following vulnerability has been resolved: staging: greybus: uart: fix tty use after free User space can hold a tty open inde
In the Linux kernel, the following vulnerability has been resolved: staging: greybus: uart: fix tty use after free User space can hold a tty open indefinitely and tty drivers must not release the underlying structures until the last user is gone. Switch to using the tty-port reference counter to manage the life time of the greybus tty state to avoid use after free after a disconnect.
GHSA
GHSA-xp4x-rp64-962g: In the Linux kernel, the following vulnerability has been resolved:
staging: greybus: uart: fix tty use after free
User space can hold a tty open in
ghsa_unreviewed·2024-05-21
CVE-2021-47358 [HIGH] CWE-416 GHSA-xp4x-rp64-962g: In the Linux kernel, the following vulnerability has been resolved:
staging: greybus: uart: fix tty use after free
User space can hold a tty open in
In the Linux kernel, the following vulnerability has been resolved:
staging: greybus: uart: fix tty use after free
User space can hold a tty open indefinitely and tty drivers must not
release the underlying structures until the last user is gone.
Switch to using the tty-port reference counter to manage the life time
of the greybus tty state to avoid use after free after a disconnect.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/4dc56951a8d9d61d364d346c61a5f1d70b4f5e14https://git.kernel.org/stable/c/64062fcaca8872f063ec9da011e7bf30470be33fhttps://git.kernel.org/stable/c/92b67aaafb7c449db9f0c3dcabc0ff967cb3a42dhttps://git.kernel.org/stable/c/92dc0b1f46e12cfabd28d709bb34f7a39431b44fhttps://git.kernel.org/stable/c/9872ff6fdce8b229f01993b611b5d1719cb70ff1https://git.kernel.org/stable/c/a5cfd51f6348e8fd7531461366946039c29c7e69https://git.kernel.org/stable/c/b9e697e60ce9890e9258a73eb061288e7d68e5e6https://git.kernel.org/stable/c/4dc56951a8d9d61d364d346c61a5f1d70b4f5e14https://git.kernel.org/stable/c/64062fcaca8872f063ec9da011e7bf30470be33fhttps://git.kernel.org/stable/c/92b67aaafb7c449db9f0c3dcabc0ff967cb3a42dhttps://git.kernel.org/stable/c/92dc0b1f46e12cfabd28d709bb34f7a39431b44fhttps://git.kernel.org/stable/c/9872ff6fdce8b229f01993b611b5d1719cb70ff1https://git.kernel.org/stable/c/a5cfd51f6348e8fd7531461366946039c29c7e69https://git.kernel.org/stable/c/b9e697e60ce9890e9258a73eb061288e7d68e5e6
2024-05-21
Published