CVE-2021-47614

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix a user-after-free in add_pble_prm When irdma_hmc_sd_one fails, 'chunk' is freed while its still on the PBLE info list. Add the chunk entry to the PBLE info list only after successful setting of the SD in irdma_hmc_sd_one.
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

21 Nov 2024, 06:36

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/11eebcf63e98fcf047a876a51d76afdabc3b8b9b - Patch () https://git.kernel.org/stable/c/11eebcf63e98fcf047a876a51d76afdabc3b8b9b - Patch
References () https://git.kernel.org/stable/c/1e11a39a82e95ce86f849f40dda0d9c0498cebd9 - Patch () https://git.kernel.org/stable/c/1e11a39a82e95ce86f849f40dda0d9c0498cebd9 - Patch

27 Aug 2024, 16:14

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/11eebcf63e98fcf047a876a51d76afdabc3b8b9b - () https://git.kernel.org/stable/c/11eebcf63e98fcf047a876a51d76afdabc3b8b9b - Patch
References () https://git.kernel.org/stable/c/1e11a39a82e95ce86f849f40dda0d9c0498cebd9 - () https://git.kernel.org/stable/c/1e11a39a82e95ce86f849f40dda0d9c0498cebd9 - Patch
First Time Linux
Linux linux Kernel
CWE CWE-416
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8

20 Jun 2024, 12:43

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: RDMA/irdma: corrige un user-after-free en add_pble_prm Cuando falla irdma_hmc_sd_one, el 'fragmento' se libera mientras todavía está en la lista de información de PBLE. Agregue la entrada del fragmento a la lista de información de PBLE solo después de configurar correctamente la SD en irdma_hmc_sd_one.

19 Jun 2024, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-19 15:15

Updated : 2024-11-21 06:36


NVD link : CVE-2021-47614

Mitre link : CVE-2021-47614

CVE.ORG link : CVE-2021-47614


JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free