CVE-2021-47088
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-47088
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-47088.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2021-47088
- Related
- Published
- 2024-03-04T18:15:07Z
- Modified
- 2025-01-16T17:20:45Z
- Severity
-
- 7.0 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
mm/damon/dbgfs: protect targets destructions with kdamond_lock
DAMON debugfs interface iterates current monitoring targets in 'dbgfstargetidsread()' while holding the corresponding 'kdamondlock'. However, it also destructs the monitoring targets in 'dbgfsbeforeterminate()' without holding the lock. This can result in a useafterfree bug. This commit avoids the race by protecting the destruction with the corresponding 'kdamond_lock'.
- References
Affected packages
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source