CVE-2021-47361
published 2024-05-21CVE-2021-47361: In the Linux kernel, the following vulnerability has been resolved: mcb: fix error handling in mcb_alloc_bus() There are two bugs: 1) If ida_simple_get() fails…
PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.24%
15.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
mcb: fix error handling in mcb_alloc_bus()
There are two bugs:
1) If ida_simple_get() fails then this code calls put_device(carrier)
but we haven't yet called get_device(carrier) and probably that
leads to a use after free.
2) After device_initialize() then we need to use put_device() to
release the bus. This will free the internal resources tied to the
device and call mcb_free_bus() which will free the rest.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.14.9-1 (bookworm) | linux 5.14.9-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 18d28819809909c3f24bb72183a901c5e332a63d < 8a558261fa57a6deefb0925ab1829f698b194aea | 8a558261fa57a6deefb0925ab1829f698b194aea |
| linux | linux | >= 18d28819809909c3f24bb72183a901c5e332a63d < 115b07d9f47e3996430b8f2007edd9768e1f807f | 115b07d9f47e3996430b8f2007edd9768e1f807f |
| linux | linux | >= 18d28819809909c3f24bb72183a901c5e332a63d < 66f74ba9be9daf9c47fface6af3677f602774f6b | 66f74ba9be9daf9c47fface6af3677f602774f6b |
| linux | linux | >= 18d28819809909c3f24bb72183a901c5e332a63d < 7751f609eadf36b1f53712bae430019c53a16eb0 | 7751f609eadf36b1f53712bae430019c53a16eb0 |
| linux | linux | >= 18d28819809909c3f24bb72183a901c5e332a63d < 91e4ad05bf18322b5921d1a6c9b603f6eb1694f0 | 91e4ad05bf18322b5921d1a6c9b603f6eb1694f0 |
| linux | linux | >= 18d28819809909c3f24bb72183a901c5e332a63d < 9fc198f415dee070a1de957bb5bf5921d8df3499 | 9fc198f415dee070a1de957bb5bf5921d8df3499 |
| linux | linux | >= 18d28819809909c3f24bb72183a901c5e332a63d < 25a1433216489de4abc889910f744e952cb6dbae | 25a1433216489de4abc889910f744e952cb6dbae |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.70-1 | 5.10.70-1 |
| linux | linux_kernel | >= 0 < 5.14.9-1 | 5.14.9-1 |
| linux | linux_kernel | >= 0 < 5.14.9-1 | 5.14.9-1 |
| linux | linux_kernel | >= 0 < 5.14.9-1 | 5.14.9-1 |
| linux | linux_kernel | >= 4.10 < 4.14.249 | 4.14.249 |
| linux | linux_kernel | >= 4.15 < 4.19.209 | 4.19.209 |
| linux | linux_kernel | >= 4.20 < 5.4.150 | 5.4.150 |
| linux | linux_kernel | >= 4.7 < 4.9.285 | 4.9.285 |
| linux | linux_kernel | >= 5.11 < 5.14.9 | 5.14.9 |
| linux | linux_kernel | >= 5.5 < 5.10.70 | 5.10.70 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: mcb: fix error handling in mcb_alloc_bus()
vendor_redhat·2024-05-21·CVSS 7.8
CVE-2021-47361 [HIGH] CWE-416 kernel: mcb: fix error handling in mcb_alloc_bus()
kernel: mcb: fix error handling in mcb_alloc_bus()
In the Linux kernel, the following vulnerability has been resolved:
mcb: fix error handling in mcb_alloc_bus()
There are two bugs:
1) If ida_simple_get() fails then this code calls put_device(carrier)
but we haven't yet called get_device(carrier) and probably that
leads to a use after free.
2) After device_initialize() then we need to use put_device() to
release the bus. This will free the internal resources tied to the
device and call mcb_free_bus() which will free the rest.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt
Debian
CVE-2021-47361: linux - In the Linux kernel, the following vulnerability has been resolved: mcb: fix er...
vendor_debian·2021·CVSS 7.8
CVE-2021-47361 [HIGH] CVE-2021-47361: linux - In the Linux kernel, the following vulnerability has been resolved: mcb: fix er...
In the Linux kernel, the following vulnerability has been resolved: mcb: fix error handling in mcb_alloc_bus() There are two bugs: 1) If ida_simple_get() fails then this code calls put_device(carrier) but we haven't yet called get_device(carrier) and probably that leads to a use after free. 2) After device_initialize() then we need to use put_device() to release the bus. This will free the internal resources tied to the device and call mcb_free_bus() which will free the rest.
Scope: local
bookworm: resolved (fixed in 5.14.9-1)
bullseye: resolved (fixed in 5.10.70-1)
forky: resolved (fixed in 5.14.9-1)
sid: resolved (fixed in 5.14.9-1)
trixie: resolved (fixed in 5.14.9-1)
GHSA
GHSA-jq6v-72pf-8j24: In the Linux kernel, the following vulnerability has been resolved:
mcb: fix error handling in mcb_alloc_bus()
There are two bugs:
1) If ida_simple_
ghsa_unreviewed·2024-05-21
CVE-2021-47361 [HIGH] CWE-416 GHSA-jq6v-72pf-8j24: In the Linux kernel, the following vulnerability has been resolved:
mcb: fix error handling in mcb_alloc_bus()
There are two bugs:
1) If ida_simple_
In the Linux kernel, the following vulnerability has been resolved:
mcb: fix error handling in mcb_alloc_bus()
There are two bugs:
1) If ida_simple_get() fails then this code calls put_device(carrier)
but we haven't yet called get_device(carrier) and probably that
leads to a use after free.
2) After device_initialize() then we need to use put_device() to
release the bus. This will free the internal resources tied to the
device and call mcb_free_bus() which will free the rest.
OSV
CVE-2021-47361: In the Linux kernel, the following vulnerability has been resolved: mcb: fix error handling in mcb_alloc_bus() There are two bugs: 1) If ida_simple_ge
osv·2024-05-21·CVSS 7.8
CVE-2021-47361 [HIGH] CVE-2021-47361: In the Linux kernel, the following vulnerability has been resolved: mcb: fix error handling in mcb_alloc_bus() There are two bugs: 1) If ida_simple_ge
In the Linux kernel, the following vulnerability has been resolved: mcb: fix error handling in mcb_alloc_bus() There are two bugs: 1) If ida_simple_get() fails then this code calls put_device(carrier) but we haven't yet called get_device(carrier) and probably that leads to a use after free. 2) After device_initialize() then we need to use put_device() to release the bus. This will free the internal resources tied to the device and call mcb_free_bus() which will free the rest.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/115b07d9f47e3996430b8f2007edd9768e1f807fhttps://git.kernel.org/stable/c/25a1433216489de4abc889910f744e952cb6dbaehttps://git.kernel.org/stable/c/66f74ba9be9daf9c47fface6af3677f602774f6bhttps://git.kernel.org/stable/c/7751f609eadf36b1f53712bae430019c53a16eb0https://git.kernel.org/stable/c/8a558261fa57a6deefb0925ab1829f698b194aeahttps://git.kernel.org/stable/c/91e4ad05bf18322b5921d1a6c9b603f6eb1694f0https://git.kernel.org/stable/c/9fc198f415dee070a1de957bb5bf5921d8df3499https://git.kernel.org/stable/c/115b07d9f47e3996430b8f2007edd9768e1f807fhttps://git.kernel.org/stable/c/25a1433216489de4abc889910f744e952cb6dbaehttps://git.kernel.org/stable/c/66f74ba9be9daf9c47fface6af3677f602774f6bhttps://git.kernel.org/stable/c/7751f609eadf36b1f53712bae430019c53a16eb0https://git.kernel.org/stable/c/8a558261fa57a6deefb0925ab1829f698b194aeahttps://git.kernel.org/stable/c/91e4ad05bf18322b5921d1a6c9b603f6eb1694f0https://git.kernel.org/stable/c/9fc198f415dee070a1de957bb5bf5921d8df3499
2024-05-21
Published