CVE-2021-47500

iio: mma8452: Fix trigger reference couting

State: Published
Severity: 7.8 High
Published: May 24, 2024
Updated: Aug 5, 2026
Reserved: May 22, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: mma8452: Fix trigger reference couting

The mma8452 driver directly assigns a trigger to the struct iio_dev. The IIO core when done using this trigger will call `iio_trigger_put()` to drop the reference count by 1.

Without the matching `iio_trigger_get()` in the driver the reference count can reach 0 too early, the trigger gets freed while still in use and a use-after-free occurs.

Fix this by getting a reference to the trigger before assigning it to the IIO device.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ae6d9ce05691bf79694074db7c7da980080548af to before 094d513b78b1714113bc016684b8142382e071baAffected ae6d9ce05691bf79694074db7c7da980080548af to before fb75cc4740d81264cd5bcb0e17d961d018a8be96Affected ae6d9ce05691bf79694074db7c7da980080548af to before 794c0898f6bf39a458655d5fb4af70ec43a5cfcbAffected ae6d9ce05691bf79694074db7c7da980080548af to before f5deab10ced368c807866283f8b79144c4823be8Affected ae6d9ce05691bf79694074db7c7da980080548af to before acf0088ac073ca6e7f4cad6acac112177e08df5eAffected ae6d9ce05691bf79694074db7c7da980080548af to before db12d95085367de8b0223929d1332731024441f1Affected ae6d9ce05691bf79694074db7c7da980080548af to before c43517071dfc9fce34f8f69dbb98a86017f6b739Affected ae6d9ce05691bf79694074db7c7da980080548af to before cd0082235783f814241a1c9483fb89e405f4f892Affected
LinuxLinux	4.2Affected before 4.2Not affected 4.4.295 through 4.4.Not affected 4.9.293 through 4.9.Not affected 4.14.258 through 4.14.Not affected 4.19.221 through 4.19.Not affected 5.4.165 through 5.4.Not affected 5.10.85 through 5.10.Not affected 5.15.8 through 5.15.*Not affected 5.16 and laterNot affected

Product

Versions

LinuxLinux

ae6d9ce05691bf79694074db7c7da980080548af to before 094d513b78b1714113bc016684b8142382e071baAffected
ae6d9ce05691bf79694074db7c7da980080548af to before fb75cc4740d81264cd5bcb0e17d961d018a8be96Affected
ae6d9ce05691bf79694074db7c7da980080548af to before 794c0898f6bf39a458655d5fb4af70ec43a5cfcbAffected
ae6d9ce05691bf79694074db7c7da980080548af to before f5deab10ced368c807866283f8b79144c4823be8Affected
ae6d9ce05691bf79694074db7c7da980080548af to before acf0088ac073ca6e7f4cad6acac112177e08df5eAffected
ae6d9ce05691bf79694074db7c7da980080548af to before db12d95085367de8b0223929d1332731024441f1Affected
ae6d9ce05691bf79694074db7c7da980080548af to before c43517071dfc9fce34f8f69dbb98a86017f6b739Affected
ae6d9ce05691bf79694074db7c7da980080548af to before cd0082235783f814241a1c9483fb89e405f4f892Affected

LinuxLinux

4.2Affected
before 4.2Not affected
4.4.295 through 4.4.*Not affected
4.9.293 through 4.9.*Not affected
4.14.258 through 4.14.*Not affected
4.19.221 through 4.19.*Not affected
5.4.165 through 5.4.*Not affected
5.10.85 through 5.10.*Not affected
5.15.8 through 5.15.*Not affected
5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.