Riskcovery

CVE-2021-47278

bus: mhi: pci_generic: Fix possible use-after-free in mhi_pci_remove()

State
Published
Severity
Not scored
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bus: mhi: pci_generic: Fix possible use-after-free in mhi_pci_remove()

This driver's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free.

Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8562d4fe34a3ef52da077f77985994bb9ad1f83e to before c597d5c59c7a6417dba06590f59b922e01188e8dAffected
  • 8562d4fe34a3ef52da077f77985994bb9ad1f83e to before 0b67808ade8893a1b3608ddd74fac7854786c919Affected
LinuxLinux
  • 5.12Affected
  • before 5.12Not affected
  • 5.12.11 through 5.12.*Not affected
  • 5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.