Wind River Support Network

HomeDefectsLIN1024-1437

Acknowledged

LIN1024-1437 : Security Advisory - linux - CVE-2021-47358

Created: May 21, 2024 Updated: Jan 7, 2026

Resolved Date: May 22, 2024

Found In Version: 10.24.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 24

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: greybus: uart: fix tty use after free

User space can hold a tty open indefinitely and tty drivers must not
release the underlying structures until the last user is gone.

Switch to using the tty-port reference counter to manage the life time
of the greybus tty state to avoid use after free after a disconnect.

CREATE(Triage):(User=admin) CVE-2021-47358 (https://nvd.nist.gov/vuln/detail/CVE-2021-47358)