CVE-2021-47653
media: davinci: vpif: fix use-after-free on driver unbind
Summary
Descriptions
In the Linux kernel, the following vulnerability has been resolved: media: davinci: vpif: fix use-after-free on driver unbind The driver allocates and registers two platform device structures during
probe, but the devices were never deregistered on driver unbind. This results in a use-after-free on driver unbind as the device
structures were allocated using devres and would be freed by driver
core when remove() returns. Fix this by adding the missing deregistration calls to the remove()
callback and failing probe on registration errors. Note that the platform device structures must be freed using a proper
release callback to avoid leaking associated resources like device
names.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2025-02-26 CVE Reserved
- 2025-02-26 CVE Published
- 2025-02-26 CVE Updated
- ---------- EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
Threat Intelligence Resources (0)
| Select | Title | Date |
|---|
Select an advisory to view details here.
| Select | Title | Date |
|---|
Select an exploit to view details here.
References (5)
| URL | Tag | Source |
|---|---|---|
| https://git.kernel.org/stable/c/479f7a1181058689435baddc16a6a42e1a8ff0e8 | Vuln. Introduced |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 4.13 < 5.15.54 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.13 < 5.15.54" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 4.13 < 5.16.19 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.13 < 5.16.19" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 4.13 < 5.17.2 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.13 < 5.17.2" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 4.13 < 5.18 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.13 < 5.18" | en |
Affected
| ||||||