CVE-2021-47372
net: macb: fix use after free on rmmod
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use after free on rmmod plat_dev->dev->platform_data is released by platform_device_unregister(), use of pclk and hclk is a use-after-free. Since device unregister won't need a clk device we adjust the function call sequence to fix this issue. [ 31.261225] BUG: KASAN: use-after-free in macb_remove+0x77/0xc6 [macb_pci] [ 31.275563] Freed by task 306: [ 30.276782] platform_device_release+0x25/0x80
Timeline
ID reserved
By Linux
Published
- 24 months later
· 24 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.24% · top 85% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Weakness
Affected products
- affected 83a77e9ec4150ee4acc635638f7dedd9da523a26 – < a7d521cc726f30b8e679a6f36d04b18a8ab3c536
- affected 83a77e9ec4150ee4acc635638f7dedd9da523a26 – < 46670fb832ee80943715df618632ca13c2e96f2b
- affected 83a77e9ec4150ee4acc635638f7dedd9da523a26 – < 1da750d1e2140ef43d64d17f301ff6f41b45541e
- affected 83a77e9ec4150ee4acc635638f7dedd9da523a26 – < 7721221e87d25c9840d9ca6b986dbdc410d5ce2b
- affected 83a77e9ec4150ee4acc635638f7dedd9da523a26 – < 4ad6f2d23b0f6ac0d3e5f3102a4256d1c86c90f5
- affected 83a77e9ec4150ee4acc635638f7dedd9da523a26 – < d82d5303c4c539db86588ffb5dc5b26c3f1513e8
- affected 4.10
- unaffected < 4.10
- unaffected 4.14.249 – ≤ 4.14.*
- unaffected 4.19.209 – ≤ 4.19.*
- unaffected 5.4.150 – ≤ 5.4.*
- unaffected 5.10.70 – ≤ 5.10.*
- unaffected 5.14.9 – ≤ 5.14.*
- unaffected 5.15 – ≤ *
References (6)
- https://git.kernel.org/stable/c/a7d521cc726f30b8e679a6f36d04b18a8ab3c536 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/46670fb832ee80943715df618632ca13c2e96f2b (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/1da750d1e2140ef43d64d17f301ff6f41b45541e (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/7721221e87d25c9840d9ca6b986dbdc410d5ce2b (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/4ad6f2d23b0f6ac0d3e5f3102a4256d1c86c90f5 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/d82d5303c4c539db86588ffb5dc5b26c3f1513e8 (opens in a new tab)x_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2021-47372)Record last updated .