CVE-2021-47372

net: macb: fix use after free on rmmod

published May 21, 2024

CVSS
—
EPSS
0%
Percentile
14.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: macb: fix use after free on rmmod

plat_dev->dev->platform_data is released by platform_device_unregister(),

use of pclk and hclk is a use-after-free. Since device unregister won't

need a clk device we adjust the function call sequence to fix this issue.

[ 31.261225] BUG: KASAN: use-after-free in macb_remove+0x77/0xc6 [macb_pci]

[ 31.275563] Freed by task 306:

[ 30.276782] platform_device_release+0x25/0x80

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00242 · 14.5th percentile
Published
2024-05-21T15:03Z
EPSS history
Timeline
  • 21 MAY 15:03Z
    net: macb: fix use after free on rmmod
    cvelistv5