PT-2024-8955 · Linux+4 · Linux Kernel+4
Hulk Robot
·
Published
2024-05-22
·
Updated
2025-04-09
·
CVE-2021-47483
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to a possible double-free in the regcache rbtree exit() function. When 'present' realloc fails in regcache rbtree insert to block(), the 'blk' assigned to 'rbnode->block' will be freed, causing 'rbnode->block' to point to freed memory. In the error handling path of regcache rbtree init(), 'rbnode->block' will be freed again in regcache rbtree exit(), resulting in a double-free error reported by KASAN. The error occurs in the following call trace: slab free freelist hook, kfree, regcache rbtree exit, regcache rbtree init, regcache init, regmap init, devm regmap init, madera spi probe, spi probe, and really probe. To fix this, the assignment of rbnode->block is moved to immediately after the reallocation has succeeded, ensuring the data structure remains valid even if the second reallocation fails.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse
Ubuntu