{
  "cveId": "CVE-2021-46959",
  "url": "https://patchblox.com/security/cve/CVE-2021-46959",
  "summary": "CVE-2021-46959 is fixed in linux on 1 platform, first by DEBIAN-CVE-2021-46959, released February 29, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  spi: Fix use-after-free with devm_spi_alloc_*  W...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  spi: Fix use-after-free with devm_spi_alloc_*  We can\u0027t rely on the contents of the devres list during spi_unregister_controller(), as the list is already torn down at the time we perform devres_find() for devm_spi_release_controller. This causes devices registered with devm_spi_alloc_{master,slave}() to be mistakenly identified as legacy, non-devm managed devices and have their reference counters decremented below 0.  ------------[ cut here ]------------ WARNING: CPU: 1 PID: 660 at lib/refcount.c:28 refcount_warn_saturate\u002B0x108/0x174 [\u003Cb0396f04\u003E] (refcount_warn_saturate) from [\u003Cb03c56a4\u003E] (kobject_put\u002B0x90/0x98) [\u003Cb03c5614\u003E] (kobject_put) from [\u003Cb0447b4c\u003E] (put_device\u002B0x20/0x24)  r4:b6700140 [\u003Cb0447b2c\u003E] (put_device) from [\u003Cb07515e8\u003E] (devm_spi_release_controller\u002B0x3c/0x40) [\u003Cb07515ac\u003E] (devm_spi_release_controller) from [\u003Cb045343c\u003E] (release_nodes\u002B0x84/0xc4)  r5:b6700180 r4:b6700100 [\u003Cb04533b8\u003E] (release_nodes) from [\u003Cb0454160\u003E] (devres_release_all\u002B0x5c/0x60)  r8:b1638c54 r7:b117ad94 r6:b1638c10 r5:b117ad94 r4:b163dc10 [\u003Cb0454104\u003E] (devres_release_all) from [\u003Cb044e41c\u003E] (__device_release_driver\u002B0x144/0x1ec)  r5:b117ad94 r4:b163dc10 [\u003Cb044e2d8\u003E] (__device_release_driver) from [\u003Cb044f70c\u003E] (device_driver_detach\u002B0x84/0xa0)  r9:00000000 r8:00000000 r7:b117ad94 r6:b163dc54 r5:b1638c10 r4:b163dc10 [\u003Cb044f688\u003E] (device_driver_detach) from [\u003Cb044d274\u003E] (unbind_store\u002B0xe4/0xf8)  Instead, determine the devm allocation state as a flag on the controller which is guaranteed to be stable during cleanup.",
  "published": "2024-02-29T23:15:07Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00245,
  "epssPercentile": 0.15848,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.10.38-1",
      "fix": "DEBIAN-CVE-2021-46959",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-46959",
      "released": "2024-02-29T23:15:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.10.38-1",
      "fix": "DEBIAN-CVE-2021-46959",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-46959",
      "released": "2024-02-29T23:15:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.10.38-1",
      "fix": "DEBIAN-CVE-2021-46959",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-46959",
      "released": "2024-02-29T23:15:07Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}