In the Linux kernel, the following vulnerability has been resolved: staging: greybus: uart: fix tty use after free User space can hold a tty open indefinitely and tty drivers must not release the underlying structures until the last user is gone. Switch to using the tty-port reference counter to manage the life time of the greybus tty state to avoid use after free after a disconnect.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/4dc56951a8d9d61d364d346c61a5f1d70b4f5e14 cve-icon cve-icon
https://git.kernel.org/stable/c/64062fcaca8872f063ec9da011e7bf30470be33f cve-icon cve-icon
https://git.kernel.org/stable/c/92b67aaafb7c449db9f0c3dcabc0ff967cb3a42d cve-icon cve-icon
https://git.kernel.org/stable/c/92dc0b1f46e12cfabd28d709bb34f7a39431b44f cve-icon cve-icon
https://git.kernel.org/stable/c/9872ff6fdce8b229f01993b611b5d1719cb70ff1 cve-icon cve-icon
https://git.kernel.org/stable/c/a5cfd51f6348e8fd7531461366946039c29c7e69 cve-icon cve-icon
https://git.kernel.org/stable/c/b9e697e60ce9890e9258a73eb061288e7d68e5e6 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024052151-CVE-2021-47358-3a8d@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2021-47358 cve-icon
https://www.cve.org/CVERecord?id=CVE-2021-47358 cve-icon
History

Thu, 26 Dec 2024 20:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Thu, 29 Aug 2024 14:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Important

 cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T14:44:50.221Z

Updated: 2025-05-04T07:09:18.414Z

Reserved: 2024-05-21T14:28:16.988Z

Link: CVE-2021-47358

cve-icon Vulnrichment

Updated: 2024-08-04T05:32:08.651Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-21T15:15:22.073

Modified: 2024-12-26T19:31:16.863

Link: CVE-2021-47358

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2021-47358 - Bugzilla