https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 21:09:52 +0000 https://vulnerability.circl.lu/vuln/cve-2021-47653 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: davinci: vpif: fix use-after-free on driver unbind</p> <p>The driver allocates and registers two platform device structures during probe, but the devices were never deregistered on driver unbind.</p> <p>This results in a use-after-free on driver unbind as the device structures were allocated using devres and would be freed by driver core when remove() returns.</p> <p>Fix this by adding the missing deregistration calls to the remove() callback and failing probe on registration errors.</p> <p>Note that the platform device structures must be freed using a proper release callback to avoid leaking associated resources like device names.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: davinci: vpif: fix use-after-free on driver unbind</p> <p>The driver allocates and registers two platform device structures during probe, but the devices were never deregistered on driver unbind.</p> <p>This results in a use-after-free on driver unbind as the device structures were allocated using devres and would be freed by driver core when remove() returns.</p> <p>Fix this by adding the missing deregistration calls to the remove() callback and failing probe on registration errors.</p> <p>Note that the platform device structures must be freed using a proper release callback to avoid leaking associated resources like device names.</p> https://vulnerability.circl.lu/vuln/cve-2021-47653