CVE-2021-47372

net: macb: fix use after free on rmmod

HIGH

7.8

CVSS Score

Published: May 21, 2024 at 03:03 PM UTC

Updated: June 17, 2026 at 04:17 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use after free on rmmod plat_dev->dev->platform_data is released by platform_device_unregister(), use of pclk and hclk is a use-after-free. Since device unregister won't need a clk device we adjust the function call sequence to fix this issue. [ 31.261225] BUG: KASAN: use-after-free in macb_remove+0x77/0xc6 [macb_pci] [ 31.275563] Freed by task 306: [ 30.276782] platform_device_release+0x25/0x80

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 4.14.2494.10 ≤ v < 4.14.2494.10 ≤ v < 4.19.2094.10 ≤ v < 5.10.704.10 ≤ v < 5.14.94.10 ≤ v < 5.154.10 ≤ v < 5.4.1504.15 ≤ v < 4.19.2094.20 ≤ v < 5.4.1505.11 ≤ v < 5.14.95.5 ≤ v < 5.10.705.15 rc183a77e9ec4150ee4acc635638f7dedd9da523a26

Vendor states this is fixed in 1da750d1e2140ef43d64d17f301ff6f41b45541e (fixed)

Vendor states this is fixed in 46670fb832ee80943715df618632ca13c2e96f2b (fixed)

Vendor states this is fixed in 4ad6f2d23b0f6ac0d3e5f3102a4256d1c86c90f5 (fixed)

Vendor states this is fixed in 7721221e87d25c9840d9ca6b986dbdc410d5ce2b (fixed)

Vendor states this is fixed in a7d521cc726f30b8e679a6f36d04b18a8ab3c536 (fixed)

Vendor states this is fixed in d82d5303c4c539db86588ffb5dc5b26c3f1513e8 (fixed)

Vendor states this is fixed in 4.10 (unaffected)

Vendor states this is fixed in 4.14.249 (unaffected)

Vendor states this is fixed in 4.19.209 (unaffected)

Vendor states this is fixed in 5.10.70 (unaffected)

Vendor states this is fixed in 5.14.9 (unaffected)

Vendor states this is fixed in 5.15 (unaffected)