VDB

DEBIAN-CVE-2021-47357

DEBIAN-CVE-2021-47357 PUBLISHED CVSS 7.800000190734863 HIGH

In the Linux kernel, the following vulnerability has been resolved: atm: iphase: fix possible use-after-free in ia_module_exit() This module's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free. Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Debian:12linux0
Debian:13linux0
Debian:14linux0

Timeline

  • May 21, 2024 CVE Published
  • Oct 23, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 50/day Open console ›