CVE-2021-47358

staging: greybus: uart: fix tty use after free

State: Published
Severity: 7.8 High
Published: May 21, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: greybus: uart: fix tty use after free

User space can hold a tty open indefinitely and tty drivers must not release the underlying structures until the last user is gone.

Switch to using the tty-port reference counter to manage the life time of the greybus tty state to avoid use after free after a disconnect.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a18e15175708d39abbe9746ddc3479466b7800c3 to before 92b67aaafb7c449db9f0c3dcabc0ff967cb3a42dAffected a18e15175708d39abbe9746ddc3479466b7800c3 to before 64062fcaca8872f063ec9da011e7bf30470be33fAffected a18e15175708d39abbe9746ddc3479466b7800c3 to before a5cfd51f6348e8fd7531461366946039c29c7e69Affected a18e15175708d39abbe9746ddc3479466b7800c3 to before 4dc56951a8d9d61d364d346c61a5f1d70b4f5e14Affected a18e15175708d39abbe9746ddc3479466b7800c3 to before b9e697e60ce9890e9258a73eb061288e7d68e5e6Affected a18e15175708d39abbe9746ddc3479466b7800c3 to before 9872ff6fdce8b229f01993b611b5d1719cb70ff1Affected a18e15175708d39abbe9746ddc3479466b7800c3 to before 92dc0b1f46e12cfabd28d709bb34f7a39431b44fAffected
LinuxLinux	4.9Affected before 4.9Not affected 4.9.285 through 4.9.Not affected 4.14.249 through 4.14.Not affected 4.19.209 through 4.19.Not affected 5.4.150 through 5.4.Not affected 5.10.70 through 5.10.Not affected 5.14.9 through 5.14.Not affected 5.15 and laterNot affected

Product

Versions

LinuxLinux

a18e15175708d39abbe9746ddc3479466b7800c3 to before 92b67aaafb7c449db9f0c3dcabc0ff967cb3a42dAffected
a18e15175708d39abbe9746ddc3479466b7800c3 to before 64062fcaca8872f063ec9da011e7bf30470be33fAffected
a18e15175708d39abbe9746ddc3479466b7800c3 to before a5cfd51f6348e8fd7531461366946039c29c7e69Affected
a18e15175708d39abbe9746ddc3479466b7800c3 to before 4dc56951a8d9d61d364d346c61a5f1d70b4f5e14Affected
a18e15175708d39abbe9746ddc3479466b7800c3 to before b9e697e60ce9890e9258a73eb061288e7d68e5e6Affected
a18e15175708d39abbe9746ddc3479466b7800c3 to before 9872ff6fdce8b229f01993b611b5d1719cb70ff1Affected
a18e15175708d39abbe9746ddc3479466b7800c3 to before 92dc0b1f46e12cfabd28d709bb34f7a39431b44fAffected

LinuxLinux

4.9Affected
before 4.9Not affected
4.9.285 through 4.9.*Not affected
4.14.249 through 4.14.*Not affected
4.19.209 through 4.19.*Not affected
5.4.150 through 5.4.*Not affected
5.10.70 through 5.10.*Not affected
5.14.9 through 5.14.*Not affected
5.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.