CVE-2021-47358

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises from the Linux kernel's greybus uart component, where user space can hold a tty open indefinitely. Tty drivers must not release underlying structures until the last user is gone. To resolve this, the kernel now uses the tty-port reference counter to manage the lifetime of the greybus tty state, preventing use after free after a disconnect.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.