PT-2024-8955

CVE-2021-47483

·

Published

2024-05-22

·

Updated

2026-10-18

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The issue is related to a possible double-free in the regcache rbtree exit() function. When 'present' realloc fails in regcache rbtree insert to block(), the 'blk' assigned to 'rbnode->block' will be freed, causing 'rbnode->block' to point to freed memory. In the error handling path of regcache rbtree init(), 'rbnode->block' will be freed again in regcache rbtree exit(), resulting in a double-free error reported by KASAN. The error occurs in the following call trace: slab free freelist hook, kfree, regcache rbtree exit, regcache rbtree init, regcache init, regmap init, devm regmap init, madera spi probe, spi probe, and really probe. To fix this, the assignment of rbnode->block is moved to immediately after the reallocation has succeeded, ensuring the data structure remains valid even if the second reallocation fails.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
CLSA-2026-1780076591
CLSA-2026-1780079196
OESA-2024-1736
OPENSUSE-SU-2024_2185-1
OPENSUSE-SU-2024_2189-1
RHSA-2022:7683
SUSE-SU-2024:1979-1
SUSE-SU-2024:1983-1
SUSE-SU-2024:2008-1
SUSE-SU-2024:2010-1
SUSE-SU-2024:2011-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2183-1
SUSE-SU-2024:2184-1
SUSE-SU-2024:2185-1
SUSE-SU-2024:2189-1
SUSE-SU-2024:2190-1
USN-7415-1
USN-7429-1
USN-7429-2
Found an issue in the description? Have something to add? Feel free to write us 👾