CVE-2021-47143

2024-03-2500:00:00

ubuntu.com

linux kernel

vulnerability

cve-2021-47143

device_add

corrupted list

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved:
net/smc: remove device from smcd_dev_list after failed device_add() If the
device_add() for a smcd_dev fails, there’s no cleanup step that rolls back
the earlier list_add(). The device subsequently gets freed, and we end up
with a corrupted list. Add some error handling that removes the device from
the list.

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlinux< anyUNKNOWN
ubuntu20.04noarchlinux-aws< anyUNKNOWN
ubuntu20.04noarchlinux-azure< anyUNKNOWN
ubuntu20.04noarchlinux-bluefield< anyUNKNOWN
ubuntu20.04noarchlinux-gcp< anyUNKNOWN
ubuntu20.04noarchlinux-gkeop< anyUNKNOWN
ubuntu20.04noarchlinux-ibm< anyUNKNOWN
ubuntu20.04noarchlinux-iot< anyUNKNOWN
ubuntu20.04noarchlinux-kvm< anyUNKNOWN
ubuntu20.04noarchlinux-oracle< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	linux	< any	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< any	UNKNOWN
ubuntu	20.04	noarch	linux-azure	< any	UNKNOWN
ubuntu	20.04	noarch	linux-bluefield	< any	UNKNOWN
ubuntu	20.04	noarch	linux-gcp	< any	UNKNOWN
ubuntu	20.04	noarch	linux-gkeop	< any	UNKNOWN
ubuntu	20.04	noarch	linux-ibm	< any	UNKNOWN
ubuntu	20.04	noarch	linux-iot	< any	UNKNOWN
ubuntu	20.04	noarch	linux-kvm	< any	UNKNOWN
ubuntu	20.04	noarch	linux-oracle	< any	UNKNOWN