CVEvulnerability
CVE-2021-46969
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-02-27
- Last modified
- 2026-08-04
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-416
Description
In the Linux kernel, the following vulnerability has been resolved:
bus: mhi: core: Fix invalid error returning in mhi_queue
mhi_queue returns an error when the doorbell is not accessible in
the current state. This can happen when the device is in non M0
state, like M3, and needs to be waken-up prior ringing the DB. This
case is managed earlier by triggering an asynchronous M3 exit via
controller resume/suspend callbacks, that in turn will cause M0
transition and DB update.
So, since it's not an error but just delaying of doorbell update, there
is no reason to return an error.
This also fixes a use after free error for skb case, indeed a caller
queuing skb will try to free the skb if the queueing fails, but in
that case queueing has been done.
Affected configurations
• linux linux kernel (>= 5.12 < 5.12.3)
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://git.kernel.org/stable/c/0ecc1c70dcd32c0f081b173a1a5d89952686f271 Patch
- https://git.kernel.org/stable/c/a99b661c3187365f81026d89b1133a76cd2652b3 Patch
- https://git.kernel.org/stable/c/0ecc1c70dcd32c0f081b173a1a5d89952686f271 Patch
- https://git.kernel.org/stable/c/a99b661c3187365f81026d89b1133a76cd2652b3 Patch