CVE-2021-47653

media: davinci: vpif: fix use-after-free on driver unbind

High · published February 26, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
17.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: davinci: vpif: fix use-after-free on driver unbind

The driver allocates and registers two platform device structures during

probe, but the devices were never deregistered on driver unbind.

This results in a use-after-free on driver unbind as the device

structures were allocated using devres and would be freed by driver

core when remove() returns.

Fix this by adding the missing deregistration calls to the remove()

callback and failing probe on registration errors.

Note that the platform device structures must be freed using a proper

release callback to avoid leaking associated resources like device

names.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00268 · 17.8th percentile
Published
2025-02-26T01:54Z
EPSS history
Timeline
  • 26 FEB 01:54Z
    media: davinci: vpif: fix use-after-free on driver unbind
    cvelistv5