Vulnerability in Linux
CVE-2021-47073
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios init_dell_smbios_wmi() only registers the dell_smbios_wmi_driver on systems where the Dell WMI interface is supported. While exit_dell_smbios_wmi() unregisters it unconditionally, this leads to the following oops: [ 175.722921] ------------[ cut here ]------------ [ 175.722925] Unexpected driver unregister! [ 175.722939] WARNING: CPU: 1 PID: 3630 at drivers/base/driver.c:194 driver_unregister+0x38/0x40 ... [ 175.723089] Call Trace: [ 175.723094] cleanup_module+0x5/0xedd [dell_smbios] ... [ 175.723148] ---[ end trace 064c34e1ad49509d ]--- Make the unregister happen on the same condition the register happens to fix this.
EPSS: 0.002 (15.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions 1a258e670434f404a4500b65ba1afea2c2b29bba, 4.15, 0
- Linux Linux_kernel — versions 5.13
References
Frequently asked questions
- What is CVE-2021-47073?
- CVE-2021-47073 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2024-03-01.
- How severe is CVE-2021-47073?
- Medium severity. CVSS v3 base score is 5.5 out of 10.