Ubuntu.comUB:CVE-2021-47048CVE-2021-47048
In the Linux kernel, the following vulnerability has been resolved: spi:
spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op When handling
op->addr, it is using the buffer “tmpbuf” which has been freed. This will
trigger a use-after-free KASAN warning. Let’s use temporary variables to
store op->addr.val and op->cmd.opcode to fix this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 24.04 | noarch | linux | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | linux-aws | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | linux-azure | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | linux-gcp | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | linux-gke | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | linux-ibm | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | linux-lowlatency | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | linux-nvidia | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | linux-oem-6.8 | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | linux-oracle | < any | UNKNOWN |
References
git.kernel.org/linus/a2c5bedb2d55dd27c642c7b9fb6886d7ad7bdb58 (5.13-rc1)
git.kernel.org/stable/c/1231279389b5e638bc3b66b9741c94077aed4b5a
git.kernel.org/stable/c/23269ac9f123eca3aea7682d3345c02e71ed696c
git.kernel.org/stable/c/a2c5bedb2d55dd27c642c7b9fb6886d7ad7bdb58
git.kernel.org/stable/c/d67e0d6bd92ebbb0294e7062bbf5cdc773764e62
launchpad.net/bugs/cve/CVE-2021-47048
nvd.nist.gov/vuln/detail/CVE-2021-47048
security-tracker.debian.org/tracker/CVE-2021-47048
www.cve.org/CVERecord?id=CVE-2021-47048
Related
