PT-2024-8955

CVE-2021-47483

·

تاريخ النشر

2024-05-22

·

تاريخ التحديث

2026-10-18

الوصف من

CVSS 3.1
7.8
عالية
المقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The issue is related to a possible double-free in the regcache rbtree exit() function. When 'present' realloc fails in regcache rbtree insert to block(), the 'blk' assigned to 'rbnode->block' will be freed, causing 'rbnode->block' to point to freed memory. In the error handling path of regcache rbtree init(), 'rbnode->block' will be freed again in regcache rbtree exit(), resulting in a double-free error reported by KASAN. The error occurs in the following call trace: slab free freelist hook, kfree, regcache rbtree exit, regcache rbtree init, regcache init, regmap init, devm regmap init, madera spi probe, spi probe, and really probe. To fix this, the assignment of rbnode->block is moved to immediately after the reallocation has succeeded, ensuring the data structure remains valid even if the second reallocation fails.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
CLSA-2026-1780076591
CLSA-2026-1780079196
OESA-2024-1736
OPENSUSE-SU-2024_2185-1
OPENSUSE-SU-2024_2189-1
RHSA-2022:7683
SUSE-SU-2024:1979-1
SUSE-SU-2024:1983-1
SUSE-SU-2024:2008-1
SUSE-SU-2024:2010-1
SUSE-SU-2024:2011-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2183-1
SUSE-SU-2024:2184-1
SUSE-SU-2024:2185-1
SUSE-SU-2024:2189-1
SUSE-SU-2024:2190-1
USN-7415-1
USN-7429-1
USN-7429-2
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾