Wind River Support Network

HomeDefectsLIN1024-1451

Acknowledged

LIN1024-1451 : Security Advisory - linux - CVE-2021-47372

Created: May 21, 2024 Updated: Jan 7, 2026

Resolved Date: May 22, 2024

Found In Version: 10.24.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 24

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

net: macb: fix use after free on rmmod

plat_dev->dev->platform_data is released by platform_device_unregister(),
use of pclk and hclk is a use-after-free. Since device unregister won't
need a clk device we adjust the function call sequence to fix this issue.

   31.261225] BUG: KASAN: use-after-free in macb_remove+0x77/0xc6 [macb_pci]
[   31.275563] Freed by task 306:
[   30.276782]  platform_device_release+0x25/0x80

CREATE(Triage):(User=admin) [CVE-2021-47372 (https://nvd.nist.gov/vuln/detail/CVE-2021-47372)