In the Linux kernel, the following vulnerability has been resolved:
media: davinci: vpif: fix use-after-free on driver unbind
The driver allocates and registers two platform device structures during
probe, but the devices were never deregistered on driver unbind.
This results in a use-after-free on driver unbind as the device
structures were allocated using devres and would be freed by driver
core when remove() returns.
Fix this by adding the missing deregistration calls to the remove()
callback and failing probe on registration errors.
Note that the platform device structures must be freed using a proper
release callback to avoid leaking associated resources like device
names.
CVSS
No CVSS.
References
Configurations
Configuration 1 (hide)
|
History
24 Mar 2025, 17:46
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux linux Kernel
Linux |
|
| References | () https://git.kernel.org/stable/c/b5a3bb7f6f164eb6ee74ef4898dcd019b2063448 - Patch | |
| References | () https://git.kernel.org/stable/c/6512c3c39cb6b573b791ce45365818a38b76afbe - Patch | |
| References | () https://git.kernel.org/stable/c/43acb728bbc40169d2e2425e84a80068270974be - Patch | |
| References | () https://git.kernel.org/stable/c/9ffc602e14d7b9f7e7cb2f67e18dfef9ef8af676 - Patch | |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
26 Feb 2025, 06:37
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-26 06:37
Updated : 2025-03-24 17:46
NVD link : CVE-2021-47653
Mitre link : CVE-2021-47653
JSON object : View
Products Affected
linux
- linux_kernel
CWE
No CWE.