PT-2024-11151 · Linux+6 · Linux Kernel+6

Published 2021-05-19 · Updated 2025-01-09 · CVE-2021-47073

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises from the init dell smbios wmi() function only registering the dell smbios wmi driver on systems where the Dell WMI interface is supported, while exit dell smbios wmi() unregisters it unconditionally. This leads to an "Unexpected driver unregister!" warning when the driver unregister function is called. The problem occurs because the unregister operation happens without considering the condition under which the register operation took place. To fix this, the unregister should happen under the same condition as the register.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-99

Related Identifiers

ALSA-2024:4211

ALSA-2024:4352

BDU:2025-05173

CESA-2024_4211

CESA-2024_4352

CVE-2021-47073

INFSA-2024_4211

INFSA-2024_4352

OPENSUSE-SU-2024_1489-1

RHSA-2024:4211

RHSA-2024:4352

RHSA-2024_4211

RHSA-2024_4352

RLSA-2024:4211

RLSA-2024:4352

RXSA-2024:4211

SUSE-SU-2024:1454-1

SUSE-SU-2024:1465-1

SUSE-SU-2024:1489-1

SUSE-SU-2024:1643-1

SUSE-SU-2024:1646-1

SUSE-SU-2024:1870-1

Affected Products

Almalinux

Astra Linux

Centos

Linux Kernel

Red Hat

Rocky Linux

Suse

References · 813

• 🔥 https://github.com/Kakashiiiiy/CVE-2021-29155 · Exploit
• 🔥 https://github.com/benschlueter/CVE-2021-29155 · Exploit
• https://ubuntu.com/security/CVE-2021-47073 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:4211 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-4352.html · Vendor Advisory
• https://git.kernel.org/stable/c/75cfc833da4a2111106d4c134e93e0c7f41e35e7 · Patch
• https://git.kernel.org/stable/c/6fa78a6b9a3beb676a010dc489c1257f7e432525 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1646-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47073 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1454-1 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-4211.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47073 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-47073 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:4352 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1489-1 · Vendor Advisory