CVE-2021-47583

media: mxl111sf: change mutex_init() location

State
Published
Severity
Not scored
Published
Jun 19, 2024
Updated
May 11, 2026
Reserved
May 24, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: mxl111sf: change mutex_init() location

Syzbot reported, that mxl111sf_ctrl_msg() uses uninitialized mutex. The problem was in wrong mutex_init() location.

Previous mutex_init(&state->msg_lock) call was in ->init() function, but dvb_usbv2_init() has this order of calls:

dvb_usbv2_init() dvb_usbv2_adapter_init() dvb_usbv2_adapter_frontend_init() props->frontend_attach()

props->init()

Since mxl111sf_* devices call mxl111sf_ctrl_msg() in ->frontend_attach() internally we need to initialize state->msg_lock before frontend_attach(). To achieve it, ->probe() call added to all mxl111sf_* devices, which will simply initiaize mutex.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8572211842afc53c8450fb470f2b8d02ba7592e0 to before 4b2d9600b31f9ba7adbc9f3c54a068615d27b390Affected
  • 8572211842afc53c8450fb470f2b8d02ba7592e0 to before 96f182c9f48b984447741f054ec301fdc8517035Affected
  • 8572211842afc53c8450fb470f2b8d02ba7592e0 to before b99bdf127af91d53919e96292c05f737c45ea59aAffected
  • 8572211842afc53c8450fb470f2b8d02ba7592e0 to before 8c6fdf62bfe1bc72bfceeaf832ef7499c7ed09baAffected
  • 8572211842afc53c8450fb470f2b8d02ba7592e0 to before 44870a9e7a3c24acbb3f888b2a7cc22c9bdf7e7fAffected
LinuxLinux
  • 3.7Affected
  • before 3.7Not affected
  • 4.19.222 through 4.19.*Not affected
  • 5.4.168 through 5.4.*Not affected
  • 5.10.88 through 5.10.*Not affected
  • 5.15.11 through 5.15.*Not affected
  • 5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.