CVE-2021-47357
Assigner: Linux
Published: 2024-05-21T14:35:59.761Z
State: PUBLISHED
descriptions: value: In the Linux kernel, the following vulnerability has been resolved:

atm: iphase: fix possible use-after-free in ia_module_exit()

This module's remove path calls del_timer(). However, that function
does not wait until the timer handler finishes. This means that the
timer handler may still be running after the driver's remove function
has finished, which would result in a use-after-free.

Fix by calling del_timer_sync(), which makes sure the timer handler
has finished, and unable to re-schedule itself.
affected: product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 1da177e4c3f4
lessThan: 9e1616878551
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: a832ee2f2145
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: bcdd2be48edd
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 89ce0b0747f3
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: c9172498d4d6
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: e759ff76ebbb
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: b58d246a058a
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: d1fb12412874
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 1c72e6ab66b9
status: affected
versionType: git
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 4.4.276
lessThanOrEqual: 4.4.*
status: unaffected
versionType: custom
version: 4.9.276
lessThanOrEqual: 4.9.*
status: unaffected
versionType: custom
version: 4.14.240
lessThanOrEqual: 4.14.*
status: unaffected
versionType: custom
version: 4.19.198
lessThanOrEqual: 4.19.*
status: unaffected
versionType: custom
version: 5.4.133
lessThanOrEqual: 5.4.*
status: unaffected
versionType: custom
version: 5.10.51
lessThanOrEqual: 5.10.*
status: unaffected
versionType: custom
version: 5.12.18
lessThanOrEqual: 5.12.*
status: unaffected
versionType: custom
version: 5.13.3
lessThanOrEqual: 5.13.*
status: unaffected
versionType: custom
version: 5.14
lessThanOrEqual: *
status: unaffected
versionType: original_commit_for_fix
title: atm: iphase: fix possible use-after-free in ia_module_exit()
x_generator: engine: bippy-d175d3acf727