CVE-2021-47334: misc/libmasm/module: Fix two use after free in ibmasm_init_one
First published: Tue May 21 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: misc/libmasm/module: Fix two use after free in ibmasm_init_one In ibmasm_init_one, it calls ibmasm_init_remote_input_dev(). Inside ibmasm_init_remote_input_dev, mouse_dev and keybd_dev are allocated by input_allocate_device(), and assigned to sp->remote.mouse_dev and sp->remote.keybd_dev respectively. In the err_free_devices error branch of ibmasm_init_one, mouse_dev and keybd_dev are freed by input_free_device(), and return error. Then the execution runs into error_send_message error branch of ibmasm_init_one, where ibmasm_free_remote_input_dev(sp) is called to unregister the freed sp->remote.mouse_dev and sp->remote.keybd_dev. My patch add a "error_init_remote" label to handle the error of ibmasm_init_remote_input_dev(), to avoid the uaf bugs.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux kernel | <4.4.276 | |
| Linux kernel | >=4.5<4.9.276 | |
| Linux kernel | >=4.10<4.14.240 | |
| Linux kernel | >=4.15<4.19.198 | |
| Linux kernel | >=4.20<5.4.134 | |
| Linux kernel | >=5.5<5.10.52 | |
| Linux kernel | >=5.11<5.12.19 | |
| Linux kernel | >=5.13<5.13.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/1512e7dc5eb08b7d92a12e2bfcd9cb8c4a1ec069
- https://git.kernel.org/stable/c/29ba8e2ba89ee2862a26d91204dd5fe77ceee25a
- https://git.kernel.org/stable/c/5b06ca113bf197aab2ab61288f42506e0049fbab
- https://git.kernel.org/stable/c/481a76d4749ee3a27f902ba213fdcbb4bb39720e
- https://git.kernel.org/stable/c/38660031e80eaa6cc9370b031c180612f414b00d
- https://git.kernel.org/stable/c/b9c87ce3bc6331f82811a8cf8e930423c22523a3
- https://git.kernel.org/stable/c/ef1067d2baa847d53c9988510d99fb494de4d12c
- https://git.kernel.org/stable/c/a7268e8a227d5a4f0bd1584f556246b0224ab274
- https://git.kernel.org/stable/c/7272b591c4cb9327c43443f67b8fbae7657dd9ae
Frequently Asked Questions
What is the severity of CVE-2021-47334?
CVE-2021-47334 has a high severity level due to use-after-free vulnerabilities found in the Linux kernel.
How do I fix CVE-2021-47334?
To fix CVE-2021-47334, update your Linux kernel to a version later than 4.4.276, 4.9.276, 4.14.240, 4.19.198, 5.4.134, 5.10.52, 5.12.19, or 5.13.4.
Which versions of the Linux kernel are affected by CVE-2021-47334?
CVE-2021-47334 affects Linux kernel versions from 4.4 up to 5.13.4 prior to updates.
What type of vulnerability is CVE-2021-47334?
CVE-2021-47334 is categorized as a use-after-free vulnerability.
Can CVE-2021-47334 lead to system exploitation?
Yes, CVE-2021-47334 can potentially allow attackers to exploit the system, leading to unauthorized access or denial of service.
- agent/references
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/linux
- canonical/linux kernel
- version/linux kernel/4.5
- version/linux kernel/4.10
- version/linux kernel/4.15
- version/linux kernel/4.20
- version/linux kernel/5.5
- version/linux kernel/5.11
- version/linux kernel/5.13