Use-after-free in Linux kernel ata driver

1) Use-after-free

EUVDB-ID: #VU90056

Risk: Low

CVSSv3.1: 7.7 [AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47549

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the sata_fsl_init_controller() and sata_fsl_remove() functions in drivers/ata/sata_fsl.c. A local user can escalate privileges on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

External links

http://git.kernel.org/stable/c/cdcd80292106df5cda325426e96495503e41f947
http://git.kernel.org/stable/c/91ba94d3f7afca195b224f77a72044fbde1389ce
http://git.kernel.org/stable/c/325ea49fc43cbc03a5e1e37de8f0ca6357ced4b1
http://git.kernel.org/stable/c/0769449b0a5eabc3545337217ae690e46673e73a
http://git.kernel.org/stable/c/77393806c76b6b44f1c44bd957788c8bd9152c45
http://git.kernel.org/stable/c/4a46b2f5dce02539e88a300800812bd24a45e097
http://git.kernel.org/stable/c/adf098e2a8a1e1fc075d6a5ba2edd13cf7189082
http://git.kernel.org/stable/c/6c8ad7e8cf29eb55836e7a0215f967746ab2b504

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.