CVE-2021-47334

Source
https://nvd.nist.gov/vuln/detail/CVE-2021-47334
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-47334.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-47334
Downstream
Related
Published
2024-05-21T15:15:20Z
Modified
2025-08-09T20:01:27Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

misc/libmasm/module: Fix two use after free in ibmasminitone

In ibmasminitone, it calls ibmasminitremoteinputdev(). Inside ibmasminitremoteinputdev, mousedev and keybddev are allocated by inputallocatedevice(), and assigned to sp->remote.mousedev and sp->remote.keybddev respectively.

In the errfreedevices error branch of ibmasminitone, mousedev and keybddev are freed by inputfreedevice(), and return error. Then the execution runs into errorsendmessage error branch of ibmasminitone, where ibmasmfreeremoteinputdev(sp) is called to unregister the freed sp->remote.mousedev and sp->remote.keybddev.

My patch add a "errorinitremote" label to handle the error of ibmasminitremoteinputdev(), to avoid the uaf bugs.

References

Affected packages