← CVE Intelligence

CVE-2021-47087

tee: optee: Fix incorrect page free bug PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix incorrect page free bug Pointer to the allocated pages (struct page *page) has already progressed towards the end of allocation. It is incorrect to perform __free_pages(page, order) using this pointer as we would free any arbitrary pages. Fix this by stop modifying the page pointer.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 3c712f14d8a9354a8807c15c64c8dd334499cc42 before 806142c805cacd098e61bdc0f72c778a2389fe4a; affected 1340dc3fb75ea69221f4f5dcb0cbace55ad0331c before ad338d825e3f7b96ee542bf313728af2d19fe9ad; affected ec185dd3ab257dc2a60953fdf1b6622f524cc5b7 before 91e94e42f6fc49635f1a16d8ae3f79552bcfda29; affected ec185dd3ab257dc2a60953fdf1b6622f524cc5b7 before 18549bf4b21c739a9def39f27dcac53e27286ab5; affected 255e17923b22cb7abd026e044416d61f6bd0eec0; affected 5.4.140 before 5.4.169; affected 5.10.58 before 5.10.89; affected 5.13.10 before 5.14
Linux / Linuxaffected 5.14; unaffected 0 before 5.14; unaffected 5.4.169 through 5.4.*; unaffected 5.10.89 through 5.10.*; unaffected 5.15.12 through 5.15.*; unaffected 5.16 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.