CVE-2021-47087

2024-03-0517:09:07

redhat.com

access.redhat.com

linux kernel

vulnerability

resolved

cve-2021-47087

fix

incorrect page free bug

optee

pointer modification

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix incorrect page free bug Pointer to the allocated pages (struct page *page) has already progressed towards the end of allocation. It is incorrect to perform __free_pages(page, order) using this pointer as we would free any arbitrary pages. Fix this by stop modifying the page pointer.