CVE-2021-47143 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: net/smc: remove device from smcd_dev_list after failed device_add() If the device_add() for a smcd_dev fails, there's no cleanup step that rolls back the earlier list_add(). The device subsequently gets freed, and we end up with a corrupted list. Add some error handling that removes the device from the list.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/40588782f1016c655ae1d302892f61d35af96842
https://git.kernel.org/stable/c/444d7be9532dcfda8e0385226c862fd7e986f607
https://git.kernel.org/stable/c/8b2cdc004d21a7255f219706dca64411108f7897
https://lore.kernel.org/linux-cve-announce/2024032558-CVE-2021-47143-4f3c@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2021-47143
https://www.cve.org/CVERecord?id=CVE-2021-47143

History

Wed, 11 Sep 2024 18:30:00 +0000

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 11 Sep 2024 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-03-25T09:07:41.075Z

Updated: 2024-12-19T07:36:03.627Z

Reserved: 2024-03-04T18:12:48.844Z

Link: CVE-2021-47143

Vulnrichment

Updated: 2024-08-04T05:24:40.199Z

NVD

Status : Awaiting Analysis

Published: 2024-03-25T09:15:08.900

Modified: 2024-11-21T06:35:29.097

Link: CVE-2021-47143

Redhat

Severity : Low

Publid Date: 2024-03-25T00:00:00Z

Links: CVE-2021-47143 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47143", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-03-04T18:12:48.844Z", "datePublished": "2024-03-25T09:07:41.075Z", "dateUpdated": "2024-12-19T07:36:03.627Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T07:36:03.627Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: remove device from smcd_dev_list after failed device_add()\n\nIf the device_add() for a smcd_dev fails, there's no cleanup step that\nrolls back the earlier list_add(). The device subsequently gets freed,\nand we end up with a corrupted list.\n\nAdd some error handling that removes the device from the list."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/smc/smc_ism.c"], "versions": [{"version": "c6ba7c9ba43de1b57e9a53946e7ff988554c84ed", "lessThan": "8b2cdc004d21a7255f219706dca64411108f7897", "status": "affected", "versionType": "git"}, {"version": "c6ba7c9ba43de1b57e9a53946e7ff988554c84ed", "lessThan": "40588782f1016c655ae1d302892f61d35af96842", "status": "affected", "versionType": "git"}, {"version": "c6ba7c9ba43de1b57e9a53946e7ff988554c84ed", "lessThan": "444d7be9532dcfda8e0385226c862fd7e986f607", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/smc/smc_ism.c"], "versions": [{"version": "4.19", "status": "affected"}, {"version": "0", "lessThan": "4.19", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.42", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.12.9", "lessThanOrEqual": "5.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.13", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/8b2cdc004d21a7255f219706dca64411108f7897"}, {"url": "https://git.kernel.org/stable/c/40588782f1016c655ae1d302892f61d35af96842"}, {"url": "https://git.kernel.org/stable/c/444d7be9532dcfda8e0385226c862fd7e986f607"}], "title": "net/smc: remove device from smcd_dev_list after failed device_add()", "x_generator": {"engine": "bippy-5f407fcff5a0"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:40.199Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/8b2cdc004d21a7255f219706dca64411108f7897", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/40588782f1016c655ae1d302892f61d35af96842", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/444d7be9532dcfda8e0385226c862fd7e986f607", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47143", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:54:57.413915Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:33:14.760Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/8b2cdc004d21a7255f219706dca64411108f7897", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/40588782f1016c655ae1d302892f61d35af96842", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/444d7be9532dcfda8e0385226c862fd7e986f607", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:40.199Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47143", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:54:57.413915Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T12:42:15.688Z"}}], "cna": {"title": "net/smc: remove device from smcd_dev_list after failed device_add()", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "c6ba7c9ba43d", "lessThan": "8b2cdc004d21", "versionType": "git"}, {"status": "affected", "version": "c6ba7c9ba43d", "lessThan": "40588782f101", "versionType": "git"}, {"status": "affected", "version": "c6ba7c9ba43d", "lessThan": "444d7be9532d", "versionType": "git"}], "programFiles": ["net/smc/smc_ism.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.19"}, {"status": "unaffected", "version": "0", "lessThan": "4.19", "versionType": "custom"}, {"status": "unaffected", "version": "5.10.42", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.12.9", "versionType": "custom", "lessThanOrEqual": "5.12.*"}, {"status": "unaffected", "version": "5.13", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["net/smc/smc_ism.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/8b2cdc004d21a7255f219706dca64411108f7897"}, {"url": "https://git.kernel.org/stable/c/40588782f1016c655ae1d302892f61d35af96842"}, {"url": "https://git.kernel.org/stable/c/444d7be9532dcfda8e0385226c862fd7e986f607"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: remove device from smcd_dev_list after failed device_add()\n\nIf the device_add() for a smcd_dev fails, there's no cleanup step that\nrolls back the earlier list_add(). The device subsequently gets freed,\nand we end up with a corrupted list.\n\nAdd some error handling that removes the device from the list."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:02:51.734Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47143", "state": "PUBLISHED", "dateUpdated": "2024-09-11T17:33:14.760Z", "dateReserved": "2024-03-04T18:12:48.844Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-03-25T09:07:41.075Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}