CVE-2021-47361

mcb: fix error handling in mcb_alloc_bus()

published May 21, 2024

CVSS
—
EPSS
0%
Percentile
14.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mcb: fix error handling in mcb_alloc_bus()

There are two bugs:

1) If ida_simple_get() fails then this code calls put_device(carrier)

but we haven't yet called get_device(carrier) and probably that

leads to a use after free.

2) After device_initialize() then we need to use put_device() to

release the bus. This will free the internal resources tied to the

device and call mcb_free_bus() which will free the rest.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00242 · 14.5th percentile
Published
2024-05-21T15:03Z
EPSS history
Timeline
  • 21 MAY 15:03Z
    mcb: fix error handling in mcb_alloc_bus()
    cvelistv5