CVE-2021-47358

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: greybus: uart: fix tty use after free

User space can hold a tty open indefinitely and tty drivers must not release the underlying structures until the last user is gone.

Switch to using the tty-port reference counter to manage the life time of the greybus tty state to avoid use after free after a disconnect.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= a18e15175708d39abbe9746ddc3479466b7800c3, < 92b67aaafb7c449db9f0c3dcabc0ff967cb3a42d; >= a18e15175708d39abbe9746ddc3479466b7800c3, < 64062fcaca8872f063ec9da011e7bf30470be33f; >= a18e15175708d39abbe9746ddc3479466b7800c3, < a5cfd51f6348e8fd7531461366946039c29c7e69; >= a18e15175708d39abbe9746ddc3479466b7800c3, < 4dc56951a8d9d61d364d346c61a5f1d70b4f5e14; >= a18e15175708d39abbe9746ddc3479466b7800c3, < b9e697e60ce9890e9258a73eb061288e7d68e5e6; >= a18e15175708d39abbe9746ddc3479466b7800c3, < 9872ff6fdce8b229f01993b611b5d1719cb70ff1; >= a18e15175708d39abbe9746ddc3479466b7800c3, < 92dc0b1f46e12cfabd28d709bb34f7a39431b44f
LinuxLinux4.9

References

Timeline

Published
May 21, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-473595.5In the Linux kernel, the following vulnerability has been resolved: cifs: Fix soft lockup during fsstress Below traces are observed duringCVE-2021-473605.5In the Linux kernel, the following vulnerability has been resolved: binder: make sure fd closes complete During BC_FREE_BUFFER processing,CVE-2021-473617.8In the Linux kernel, the following vulnerability has been resolved: mcb: fix error handling in mcb_alloc_bus() There are two bugs: 1) If iCVE-2021-473625.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Update intermediate power state for SI Update the current CVE-2021-473635.5In the Linux kernel, the following vulnerability has been resolved: nexthop: Fix division by zero while replacing a resilient group The reCVE-2021-473645.5In the Linux kernel, the following vulnerability has been resolved: comedi: Fix memory leak in compat_insnlist() `compat_insnlist()` handlCVE-2021-473655.5In the Linux kernel, the following vulnerability has been resolved: afs: Fix page leak There's a loop in afs_extend_writeback() that adds CVE-2021-473665.5In the Linux kernel, the following vulnerability has been resolved: afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server AFS-CVE-2021-473675.5In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix pages leaking when building skb in big mode We try to CVE-2021-473687.1In the Linux kernel, the following vulnerability has been resolved: enetc: Fix illegal access when reading affinity_hint irq_set_affinity_CVE-2021-473695.5In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix NULL deref in qeth_clear_working_pool_list() When qeth_CVE-2021-473705.5In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure tx skbs always have the MPTCP ext Due to signed/unsigned
CVE-2021-47358: High severity, CVSS 7.8 | Vulnix