CVE-2021-47334

misc/libmasm/module: Fix two use after free in ibmasm_init_one

State: Published
Severity: Not scored
Published: May 21, 2024
Updated: May 11, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

misc/libmasm/module: Fix two use after free in ibmasm_init_one

In ibmasm_init_one, it calls ibmasm_init_remote_input_dev(). Inside ibmasm_init_remote_input_dev, mouse_dev and keybd_dev are allocated by input_allocate_device(), and assigned to sp->remote.mouse_dev and sp->remote.keybd_dev respectively.

In the err_free_devices error branch of ibmasm_init_one, mouse_dev and keybd_dev are freed by input_free_device(), and return error. Then the execution runs into error_send_message error branch of ibmasm_init_one, where ibmasm_free_remote_input_dev(sp) is called to unregister the freed sp->remote.mouse_dev and sp->remote.keybd_dev.

My patch add a "error_init_remote" label to handle the error of ibmasm_init_remote_input_dev(), to avoid the uaf bugs.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	736ce43295682d060f2b93624b4a339f9af6aab1 to before 1512e7dc5eb08b7d92a12e2bfcd9cb8c4a1ec069Affected 736ce43295682d060f2b93624b4a339f9af6aab1 to before 29ba8e2ba89ee2862a26d91204dd5fe77ceee25aAffected 736ce43295682d060f2b93624b4a339f9af6aab1 to before 5b06ca113bf197aab2ab61288f42506e0049fbabAffected 736ce43295682d060f2b93624b4a339f9af6aab1 to before 481a76d4749ee3a27f902ba213fdcbb4bb39720eAffected 736ce43295682d060f2b93624b4a339f9af6aab1 to before 38660031e80eaa6cc9370b031c180612f414b00dAffected 736ce43295682d060f2b93624b4a339f9af6aab1 to before b9c87ce3bc6331f82811a8cf8e930423c22523a3Affected 736ce43295682d060f2b93624b4a339f9af6aab1 to before ef1067d2baa847d53c9988510d99fb494de4d12cAffected 736ce43295682d060f2b93624b4a339f9af6aab1 to before a7268e8a227d5a4f0bd1584f556246b0224ab274Affected 736ce43295682d060f2b93624b4a339f9af6aab1 to before 7272b591c4cb9327c43443f67b8fbae7657dd9aeAffected
LinuxLinux	2.6.16Affected before 2.6.16Not affected 4.4.276 through 4.4.Not affected 4.9.276 through 4.9.Not affected 4.14.240 through 4.14.Not affected 4.19.198 through 4.19.Not affected 5.4.134 through 5.4.Not affected 5.10.52 through 5.10.Not affected 5.12.19 through 5.12.Not affected 5.13.4 through 5.13.Not affected 5.14 and laterNot affected

Product

Versions

LinuxLinux

736ce43295682d060f2b93624b4a339f9af6aab1 to before 1512e7dc5eb08b7d92a12e2bfcd9cb8c4a1ec069Affected
736ce43295682d060f2b93624b4a339f9af6aab1 to before 29ba8e2ba89ee2862a26d91204dd5fe77ceee25aAffected
736ce43295682d060f2b93624b4a339f9af6aab1 to before 5b06ca113bf197aab2ab61288f42506e0049fbabAffected
736ce43295682d060f2b93624b4a339f9af6aab1 to before 481a76d4749ee3a27f902ba213fdcbb4bb39720eAffected
736ce43295682d060f2b93624b4a339f9af6aab1 to before 38660031e80eaa6cc9370b031c180612f414b00dAffected
736ce43295682d060f2b93624b4a339f9af6aab1 to before b9c87ce3bc6331f82811a8cf8e930423c22523a3Affected
736ce43295682d060f2b93624b4a339f9af6aab1 to before ef1067d2baa847d53c9988510d99fb494de4d12cAffected
736ce43295682d060f2b93624b4a339f9af6aab1 to before a7268e8a227d5a4f0bd1584f556246b0224ab274Affected
736ce43295682d060f2b93624b4a339f9af6aab1 to before 7272b591c4cb9327c43443f67b8fbae7657dd9aeAffected

LinuxLinux

2.6.16Affected
before 2.6.16Not affected
4.4.276 through 4.4.*Not affected
4.9.276 through 4.9.*Not affected
4.14.240 through 4.14.*Not affected
4.19.198 through 4.19.*Not affected
5.4.134 through 5.4.*Not affected
5.10.52 through 5.10.*Not affected
5.12.19 through 5.12.*Not affected
5.13.4 through 5.13.*Not affected
5.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.