PT-2021-8177 · Linux+3 · Linux Kernel+3

Published

2021-09-13

·

Updated

2026-03-14

·

CVE-2021-47205

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the clk component of the Linux kernel, where unbinding a CCU driver unmaps the device's MMIO region but leaves its clocks/resets and their providers registered. This can cause a page fault later when some clock operation tries to perform MMIO. The fix involves separating the CCU initialization from the memory allocation and using a devres callback to unregister the clocks and resets. This also fixes a memory leak of the struct ccu reset and uses the correct owner for the clocks and resets.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2024-09227
CVE-2021-47205
OESA-2024-1941
OESA-2024-1942
OESA-2024-2182
OPENSUSE-SU-2024_1641-1
OPENSUSE-SU-2024_1644-1
OPENSUSE-SU-2024_1659-1
OPENSUSE-SU-2024_1663-1
SUSE-SU-2024:1641-1
SUSE-SU-2024:1643-1
SUSE-SU-2024:1644-1
SUSE-SU-2024:1646-1
SUSE-SU-2024:1647-1
SUSE-SU-2024:1659-1
SUSE-SU-2024:1663-1
SUSE-SU-2024:1870-1

Affected Products

Debian
Linux Kernel
Red Os
Suse