CVE - CVE-2021-47357

CVE-ID
CVE-2021-47357	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: atm: iphase: fix possible use-after-free in ia_module_exit() This module's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free. Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/1c72e6ab66b9598cac741ed397438a52065a8f1f URL:https://git.kernel.org/stable/c/1c72e6ab66b9598cac741ed397438a52065a8f1f MISC:https://git.kernel.org/stable/c/89ce0b0747f319eb70f85bc820dcc43cebbd5417 URL:https://git.kernel.org/stable/c/89ce0b0747f319eb70f85bc820dcc43cebbd5417 MISC:https://git.kernel.org/stable/c/9e161687855175334ca93c6c3ccb221731194479 URL:https://git.kernel.org/stable/c/9e161687855175334ca93c6c3ccb221731194479 MISC:https://git.kernel.org/stable/c/a832ee2f2145f57443b2d565f8cb5490e8339f42 URL:https://git.kernel.org/stable/c/a832ee2f2145f57443b2d565f8cb5490e8339f42 MISC:https://git.kernel.org/stable/c/b58d246a058ae88484758cd4ab27b3180fd5ecf8 URL:https://git.kernel.org/stable/c/b58d246a058ae88484758cd4ab27b3180fd5ecf8 MISC:https://git.kernel.org/stable/c/bcdd2be48edd8c6867fb44112cb8d18086beae29 URL:https://git.kernel.org/stable/c/bcdd2be48edd8c6867fb44112cb8d18086beae29 MISC:https://git.kernel.org/stable/c/c9172498d4d62c9b64e5fb37c1ee0343e65fe51b URL:https://git.kernel.org/stable/c/c9172498d4d62c9b64e5fb37c1ee0343e65fe51b MISC:https://git.kernel.org/stable/c/d1fb12412874c94ad037e11d0ecdd1140a439297 URL:https://git.kernel.org/stable/c/d1fb12412874c94ad037e11d0ecdd1140a439297 MISC:https://git.kernel.org/stable/c/e759ff76ebbbfcdcf83b6634c54dc47828573d8b URL:https://git.kernel.org/stable/c/e759ff76ebbbfcdcf83b6634c54dc47828573d8b
Assigning CNA
kernel.org
Date Record Created
20240521	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240521)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.