CVE-2021-47205

{"id": "CVE-2021-47205", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2021-47205", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-12T16:35:34.459047Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "c6a0637460c29799f1e63a6a4a65bda22caf4a54", "lessThan": "b5dd513daa70ee8f6d281a20bd28485ee9bb7db2", "versionType": "git"}, {"status": "affected", "version": "c6a0637460c29799f1e63a6a4a65bda22caf4a54", "lessThan": "9bec2b9c6134052994115d2d3374e96f2ccb9b9d", "versionType": "git"}], "programFiles": ["drivers/clk/sunxi-ng/ccu-sun4i-a10.c", "drivers/clk/sunxi-ng/ccu-sun50i-a100-r.c", "drivers/clk/sunxi-ng/ccu-sun50i-a100.c", "drivers/clk/sunxi-ng/ccu-sun50i-a64.c", "drivers/clk/sunxi-ng/ccu-sun50i-h6-r.c", "drivers/clk/sunxi-ng/ccu-sun50i-h6.c", "drivers/clk/sunxi-ng/ccu-sun50i-h616.c", "drivers/clk/sunxi-ng/ccu-sun5i.c", "drivers/clk/sunxi-ng/ccu-sun6i-a31.c", "drivers/clk/sunxi-ng/ccu-sun8i-a23.c", "drivers/clk/sunxi-ng/ccu-sun8i-a33.c", "drivers/clk/sunxi-ng/ccu-sun8i-a83t.c", "drivers/clk/sunxi-ng/ccu-sun8i-de2.c", "drivers/clk/sunxi-ng/ccu-sun8i-h3.c", "drivers/clk/sunxi-ng/ccu-sun8i-r.c", "drivers/clk/sunxi-ng/ccu-sun8i-r40.c", "drivers/clk/sunxi-ng/ccu-sun8i-v3s.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80-de.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80-usb.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80.c", "drivers/clk/sunxi-ng/ccu-suniv-f1c100s.c", "drivers/clk/sunxi-ng/ccu_common.c", "drivers/clk/sunxi-ng/ccu_common.h"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.10"}, {"status": "unaffected", "version": "0", "lessThan": "4.10", "versionType": "semver"}, {"status": "unaffected", "version": "5.15.5", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "5.16", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/clk/sunxi-ng/ccu-sun4i-a10.c", "drivers/clk/sunxi-ng/ccu-sun50i-a100-r.c", "drivers/clk/sunxi-ng/ccu-sun50i-a100.c", "drivers/clk/sunxi-ng/ccu-sun50i-a64.c", "drivers/clk/sunxi-ng/ccu-sun50i-h6-r.c", "drivers/clk/sunxi-ng/ccu-sun50i-h6.c", "drivers/clk/sunxi-ng/ccu-sun50i-h616.c", "drivers/clk/sunxi-ng/ccu-sun5i.c", "drivers/clk/sunxi-ng/ccu-sun6i-a31.c", "drivers/clk/sunxi-ng/ccu-sun8i-a23.c", "drivers/clk/sunxi-ng/ccu-sun8i-a33.c", "drivers/clk/sunxi-ng/ccu-sun8i-a83t.c", "drivers/clk/sunxi-ng/ccu-sun8i-de2.c", "drivers/clk/sunxi-ng/ccu-sun8i-h3.c", "drivers/clk/sunxi-ng/ccu-sun8i-r.c", "drivers/clk/sunxi-ng/ccu-sun8i-r40.c", "drivers/clk/sunxi-ng/ccu-sun8i-v3s.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80-de.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80-usb.c", "drivers/clk/sunxi-ng/ccu-sun9i-a80.c", "drivers/clk/sunxi-ng/ccu-suniv-f1c100s.c", "drivers/clk/sunxi-ng/ccu_common.c", "drivers/clk/sunxi-ng/ccu_common.h"], "defaultStatus": "affected"}]}], "published": "2024-04-10T19:15:48.310", "references": [{"url": "https://git.kernel.org/stable/c/9bec2b9c6134052994115d2d3374e96f2ccb9b9d", "tags": ["Mailing List", "Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b5dd513daa70ee8f6d281a20bd28485ee9bb7db2", "tags": ["Mailing List", "Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/9bec2b9c6134052994115d2d3374e96f2ccb9b9d", "tags": ["Mailing List", "Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://git.kernel.org/stable/c/b5dd513daa70ee8f6d281a20bd28485ee9bb7db2", "tags": ["Mailing List", "Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-401"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: sunxi-ng: Unregister clocks/resets when unbinding\n\nCurrently, unbinding a CCU driver unmaps the device's MMIO region, while\nleaving its clocks/resets and their providers registered. This can cause\na page fault later when some clock operation tries to perform MMIO. Fix\nthis by separating the CCU initialization from the memory allocation,\nand then using a devres callback to unregister the clocks and resets.\n\nThis also fixes a memory leak of the `struct ccu_reset`, and uses the\ncorrect owner (the specific platform driver) for the clocks and resets.\n\nEarly OF clock providers are never unregistered, and limited error\nhandling is possible, so they are mostly unchanged. The error reporting\nis made more consistent by moving the message inside of_sunxi_ccu_probe."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: clk: sunxi-ng: Anular el registro de relojes/reinicios al desvincular Actualmente, desvincular un controlador CCU anula la asignaci\u00f3n de la regi\u00f3n MMIO del dispositivo, mientras que deja sus relojes/reinicios y sus proveedores registrados. Esto puede causar una falla de p\u00e1gina m\u00e1s adelante cuando alguna operaci\u00f3n de reloj intenta realizar MMIO. Solucione esto separando la inicializaci\u00f3n de CCU de la asignaci\u00f3n de memoria y luego usando una devoluci\u00f3n de llamada devres para anular el registro de los relojes y reinicios. Esto tambi\u00e9n corrige una p\u00e9rdida de memoria de `struct ccu_reset` y usa el propietario correcto (el controlador de plataforma espec\u00edfico) para los relojes y reinicios. Los primeros proveedores de reloj OF nunca se anulan del registro y es posible un manejo de errores limitado, por lo que en su mayor\u00eda no se modifican. El informe de errores se hace m\u00e1s consistente moviendo el mensaje dentro de of_sunxi_ccu_probe."}], "lastModified": "2026-06-17T04:16:54.393", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2845F69-264B-45BD-B7E7-D12B24338382", "versionEndExcluding": "5.15.5"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}