PT-2024-11192 · Linux+1 · Linux Kernel+1

Julian Wiedmann · Published 2021-05-17 · Updated 2024-05-30 · CVE-2021-47143

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises when the device add() function for a smcd dev fails, resulting in a corrupted list due to the lack of a cleanup step that removes the device from the smcd dev list. This occurs because the device is freed after the failure, but its earlier addition to the list is not rolled back. The resolution involves adding error handling to remove the device from the list in the event of a device add() failure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-459

Related Identifiers

BDU:2025-13698

CVE-2021-47143

OESA-2024-1483

OESA-2024-1484

SUSE-SU-2024:1643-1

SUSE-SU-2024:1646-1

SUSE-SU-2024:1870-1

Affected Products

Linux Kernel

Suse

References · 501

• https://nvd.nist.gov/vuln/detail/CVE-2021-47143 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47142 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:1646-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52578 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-36783 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47143 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47143 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52475 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47145 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47167 · Security Note
• https://ubuntu.com/security/CVE-2021-47143 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47161 · Security Note
• https://git.kernel.org/stable/c/444d7be9532dcfda8e0385226c862fd7e986f607 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47163 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52510 · Security Note