CVE-2021-47234

MEDIUM

Linux Kernel - Use-After-Free in mtk_phy_init()

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init() Use clk_disable_unprepare() in the error path of mtk_phy_init() to fix some resource leaks.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/9a17907946232d01aa2ec109da5f93b8d31dd425

Patch

https://git.kernel.org/stable/c/6472955af5e88b5489b6d78316082ad56ea3e489

Patch

https://git.kernel.org/stable/c/aaac9a1bd370338ce372669eb9a6059d16b929aa

Scores

CVSS v3 5.5

EPSS 0.0022

EPSS Percentile 12.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-401

Status published

Products (10)

Linux/Linux < 4.14

Linux/Linux 4.14

Linux/Linux 44a6d6ce6436a2b827c93ac59a6187af0c381a48 - 6472955af5e88b5489b6d78316082ad56ea3e489

Linux/Linux 44a6d6ce6436a2b827c93ac59a6187af0c381a48 - 9a17907946232d01aa2ec109da5f93b8d31dd425

Linux/Linux 44a6d6ce6436a2b827c93ac59a6187af0c381a48 - aaac9a1bd370338ce372669eb9a6059d16b929aa

Linux/Linux 5.10.46 - 5.10.*

Linux/Linux 5.12.13 - 5.12.*

Linux/Linux 5.13

linux/linux_kernel 5.13 rc1 (5 CPE variants)

linux/linux_kernel < 5.10.46

Published May 21, 2024

Tracked Since Feb 18, 2026