CVE-2021-47470

mm, slub: fix potential use-after-free in slab_debugfs_fops

published May 22, 2024

CVSS
—
EPSS
0%
Percentile
9.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mm, slub: fix potential use-after-free in slab_debugfs_fops

When sysfs_slab_add failed, we shouldn't call debugfs_slab_add() for s

because s will be freed soon. And slab_debugfs_fops will use s later

leading to a use-after-free.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00202 · 9.6th percentile
Published
2024-05-22T06:23Z
EPSS history
Timeline
  • 22 MAY 06:23Z
    mm, slub: fix potential use-after-free in slab_debugfs_fops
    cvelistv5