CVE-2021-47500: iio: mma8452: Fix trigger reference couting
In the Linux kernel, the following vulnerability has been resolved:
iio: mma8452: Fix trigger reference couting
The mma8452 driver directly assigns a trigger to the struct iiodev. The IIO core when done using this trigger will call iiotriggerput() to drop the reference count by 1.
Without the matching iiotriggerget() in the driver the reference count can reach 0 too early, the trigger gets freed while still in use and a use-after-free occurs.
Fix this by getting a reference to the trigger before assigning it to the IIO device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47500?
CVE-2021-47500 has been rated with medium severity due to its potential impact on the integrity of kernel operations.
How do I fix CVE-2021-47500?
To mitigate CVE-2021-47500, you should upgrade to the latest stable version of the Linux kernel that addresses this vulnerability.
Which Linux kernel versions are affected by CVE-2021-47500?
CVE-2021-47500 affects Linux kernel versions from 4.2 to 5.15-rc4, including several ranges within these versions.
What type of vulnerability is CVE-2021-47500?
CVE-2021-47500 is classified as a reference counting issue in the Linux kernel's IIO subsystem.
Are there any known exploits for CVE-2021-47500?
As of now, there are no publicly available exploits for CVE-2021-47500, but it is advisable to apply mitigation measures promptly.