CVE - CVE-2021-47195

CVE-ID
CVE-2021-47195	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free of the add_lock mutex Commit 6098475d4cb4 ("spi: Fix deadlock when adding SPI controllers on SPI buses") introduced a per-controller mutex. But mutex_unlock() of said lock is called after the controller is already freed: spi_unregister_controller(ctlr) -> put_device(&ctlr->dev) -> spi_controller_release(dev) -> mutex_unlock(&ctrl->add_lock) Move the put_device() after the mutex_unlock().
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/11eab327a2a8bd36c38afbff920ae1bd45588dd4 URL:https://git.kernel.org/stable/c/11eab327a2a8bd36c38afbff920ae1bd45588dd4 MISC:https://git.kernel.org/stable/c/37330f37f6666c7739a44b2b6b95b047ccdbed2d URL:https://git.kernel.org/stable/c/37330f37f6666c7739a44b2b6b95b047ccdbed2d MISC:https://git.kernel.org/stable/c/54c2c96eafcfd242e52e932ab54ace4784efe1dd URL:https://git.kernel.org/stable/c/54c2c96eafcfd242e52e932ab54ace4784efe1dd MISC:https://git.kernel.org/stable/c/6c53b45c71b4920b5e62f0ea8079a1da382b9434 URL:https://git.kernel.org/stable/c/6c53b45c71b4920b5e62f0ea8079a1da382b9434
Assigning CNA
kernel.org
Date Record Created
20240325	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240325)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)