Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2021-47143
HistoryMar 25, 2024 - 9:15 a.m.

CVE-2021-47143

2024-03-2509:15:08
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
linux kernel
net/smc
device_add
error handling
corrupted list
cve-2021-47143

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved:

net/smc: remove device from smcd_dev_list after failed device_add()

If the device_add() for a smcd_dev fails, there’s no cleanup step that
rolls back the earlier list_add(). The device subsequently gets freed,
and we end up with a corrupted list.

Add some error handling that removes the device from the list.

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%