{
  "cveId": "CVE-2021-47549",
  "url": "https://patchblox.com/security/cve/CVE-2021-47549",
  "summary": "CVE-2021-47549 is fixed in linux on 1 platform, first by DEBIAN-CVE-2021-47549, released May 24, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sata_fsl: fix UAF in sata_fsl_port_stop when rmm...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl  When the \u0060rmmod sata_fsl.ko\u0060 command is executed in the PPC64 GNU/Linux, a bug is reported:  ==================================================================  BUG: Unable to handle kernel data access on read at 0x80000800805b502c  Oops: Kernel access of bad area, sig: 11 [#1]  NIP [c0000000000388a4] .ioread32\u002B0x4/0x20  LR [80000000000c6034] .sata_fsl_port_stop\u002B0x44/0xe0 [sata_fsl]  Call Trace:   .free_irq\u002B0x1c/0x4e0 (unreliable)   .ata_host_stop\u002B0x74/0xd0 [libata]   .release_nodes\u002B0x330/0x3f0   .device_release_driver_internal\u002B0x178/0x2c0   .driver_detach\u002B0x64/0xd0   .bus_remove_driver\u002B0x70/0xf0   .driver_unregister\u002B0x38/0x80   .platform_driver_unregister\u002B0x14/0x30   .fsl_sata_driver_exit\u002B0x18/0xa20 [sata_fsl]   .__se_sys_delete_module\u002B0x1ec/0x2d0   .system_call_exception\u002B0xfc/0x1f0   system_call_common\u002B0xf8/0x200  ==================================================================  The triggering of the BUG is shown in the following stack:  driver_detach   device_release_driver_internal     __device_release_driver       drv-\u003Eremove(dev) --\u003E platform_drv_remove/platform_remove         drv-\u003Eremove(dev) --\u003E sata_fsl_remove           iounmap(host_priv-\u003Ehcr_base);\t\t\t\u003C---- unmap           kfree(host_priv);                             \u003C---- free       devres_release_all         release_nodes           dr-\u003Enode.release(dev, dr-\u003Edata) --\u003E ata_host_stop             ap-\u003Eops-\u003Eport_stop(ap) --\u003E sata_fsl_port_stop                 ioread32(hcr_base \u002B HCONTROL)           \u003C---- UAF             host-\u003Eops-\u003Ehost_stop(host)  The iounmap(host_priv-\u003Ehcr_base) and kfree(host_priv) functions should not be executed in drv-\u003Eremove. These functions should be executed in host_stop after port_stop. Therefore, we move these functions to the new function sata_fsl_host_stop and bind the new function to host_stop.",
  "published": "2024-05-24T15:15:19Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00235,
  "epssPercentile": 0.14527,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.15.15-1",
      "fix": "DEBIAN-CVE-2021-47549",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47549",
      "released": "2024-05-24T15:15:19Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.15.15-1",
      "fix": "DEBIAN-CVE-2021-47549",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47549",
      "released": "2024-05-24T15:15:19Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.15.15-1",
      "fix": "DEBIAN-CVE-2021-47549",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47549",
      "released": "2024-05-24T15:15:19Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}