Log in Start free

Vulnerability · Published Feb 29, 2024 · Assigned by Linux

CVE-2021-47054bus: qcom: Put child node before return

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 85.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: bus: qcom: Put child node before return Put child node before return to fix potential reference count leak. Generally, the reference count of child is incremented and decremented automatically in the macro for_each_available_child_of_node() and should be decremented manually if the loop is broken in loop body.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux5.10.38-1DEBIAN-CVE-2021-47054
Debian:13linux5.10.38-1DEBIAN-CVE-2021-47054
Debian:14linux5.10.38-1DEBIAN-CVE-2021-47054
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2021-47054
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2021-47054
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2021-47054

Affected products (as reported)

VendorProductVersions
Linux Linux 335a127548081322bd2b294d715418648912f20c – before a6191e91c10e50bd51db65a00e03d02b6b0cf8c4335a127548081322bd2b294d715418648912f20c – before 94810fc52925eb122a922df7f9966cf3f4ba7391335a127548081322bd2b294d715418648912f20c – before a399dd80e697a02cfb23e2fc09b87849994043d9335a127548081322bd2b294d715418648912f20c – before 3a76ec28824c01b57aa1f0927841d75e4f167cb8335a127548081322bd2b294d715418648912f20c – before 00f6abd3509b1d70d0ab0fbe65ce5685cebed8be335a127548081322bd2b294d715418648912f20c – before 6b68c03dfc79cd95a58dfd03f91f6e82829a1b0c335a127548081322bd2b294d715418648912f20c – before c6f8e0dc8da1cd78d640dee392071cc2326ec1b2335a127548081322bd2b294d715418648912f20c – before ac6ad7c2a862d682bb584a4bc904d89fa7721af8
Linux Linux 4.9

References