CVE-2021-47356
Assigner: Linux
Published: 2024-05-21T14:35:59.097Z
State: PUBLISHED
descriptions: value: In the Linux kernel, the following vulnerability has been resolved:

mISDN: fix possible use-after-free in HFC_cleanup()

This module's remove path calls del_timer(). However, that function
does not wait until the timer handler finishes. This means that the
timer handler may still be running after the driver's remove function
has finished, which would result in a use-after-free.

Fix by calling del_timer_sync(), which makes sure the timer handler
has finished, and unable to re-schedule itself.
affected: product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 1da177e4c3f4
lessThan: 49331c07ef0f
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 54ff32029289
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 7867ddc5f3de
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 5f2818185da0
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 3ecd228c636e
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: b7ee9ae1e0cf
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 61370ff07e0a
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: ed7c3739d0a0
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 009fc857c5f6
status: affected
versionType: git
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 4.4.276
lessThanOrEqual: 4.4.*
status: unaffected
versionType: custom
version: 4.9.276
lessThanOrEqual: 4.9.*
status: unaffected
versionType: custom
version: 4.14.240
lessThanOrEqual: 4.14.*
status: unaffected
versionType: custom
version: 4.19.198
lessThanOrEqual: 4.19.*
status: unaffected
versionType: custom
version: 5.4.133
lessThanOrEqual: 5.4.*
status: unaffected
versionType: custom
version: 5.10.51
lessThanOrEqual: 5.10.*
status: unaffected
versionType: custom
version: 5.12.18
lessThanOrEqual: 5.12.*
status: unaffected
versionType: custom
version: 5.13.3
lessThanOrEqual: 5.13.*
status: unaffected
versionType: custom
version: 5.14
lessThanOrEqual: *
status: unaffected
versionType: original_commit_for_fix
title: mISDN: fix possible use-after-free in HFC_cleanup()
x_generator: engine: bippy-d175d3acf727