CVE-2021-47087

tee: optee: Fix incorrect page free bug

State: Published
Severity: 7.8 High
Published: Mar 4, 2024
Updated: Aug 5, 2026
Reserved: Feb 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

tee: optee: Fix incorrect page free bug

Pointer to the allocated pages (struct page *page) has already progressed towards the end of allocation. It is incorrect to perform __free_pages(page, order) using this pointer as we would free any arbitrary pages. Fix this by stop modifying the page pointer.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	3c712f14d8a9354a8807c15c64c8dd334499cc42 to before 806142c805cacd098e61bdc0f72c778a2389fe4aAffected 1340dc3fb75ea69221f4f5dcb0cbace55ad0331c to before ad338d825e3f7b96ee542bf313728af2d19fe9adAffected ec185dd3ab257dc2a60953fdf1b6622f524cc5b7 to before 91e94e42f6fc49635f1a16d8ae3f79552bcfda29Affected ec185dd3ab257dc2a60953fdf1b6622f524cc5b7 to before 18549bf4b21c739a9def39f27dcac53e27286ab5Affected 255e17923b22cb7abd026e044416d61f6bd0eec0Affected 5.4.140 to before 5.4.169Affected 5.10.58 to before 5.10.89Affected 5.13.10 to before 5.14Affected
LinuxLinux	5.14Affected before 5.14Not affected 5.4.169 through 5.4.Not affected 5.10.89 through 5.10.Not affected 5.15.12 through 5.15.*Not affected 5.16 and laterNot affected

Product

Versions

LinuxLinux

3c712f14d8a9354a8807c15c64c8dd334499cc42 to before 806142c805cacd098e61bdc0f72c778a2389fe4aAffected
1340dc3fb75ea69221f4f5dcb0cbace55ad0331c to before ad338d825e3f7b96ee542bf313728af2d19fe9adAffected
ec185dd3ab257dc2a60953fdf1b6622f524cc5b7 to before 91e94e42f6fc49635f1a16d8ae3f79552bcfda29Affected
ec185dd3ab257dc2a60953fdf1b6622f524cc5b7 to before 18549bf4b21c739a9def39f27dcac53e27286ab5Affected
255e17923b22cb7abd026e044416d61f6bd0eec0Affected
5.4.140 to before 5.4.169Affected
5.10.58 to before 5.10.89Affected
5.13.10 to before 5.14Affected

LinuxLinux

5.14Affected
before 5.14Not affected
5.4.169 through 5.4.*Not affected
5.10.89 through 5.10.*Not affected
5.15.12 through 5.15.*Not affected
5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.