CVE-2021-47087

HIGH7.8

tee: optee: Fix incorrect page free bug

Published Mar 4, 2024

Modified 1 months ago

Details

In the Linux kernel, the following vulnerability has been resolved:

tee: optee: Fix incorrect page free bug

Pointer to the allocated pages (struct page *page) has already progressed towards the end of allocation. It is incorrect to perform __free_pages(page, order) using this pointer as we would free any arbitrary pages. Fix this by stop modifying the page pointer.

References

WEB

https://git.kernel.org/stable/c/18549bf4b21c739a9def39f27dcac53e27286ab5

WEB

https://git.kernel.org/stable/c/806142c805cacd098e61bdc0f72c778a2389fe4a

WEB

https://git.kernel.org/stable/c/91e94e42f6fc49635f1a16d8ae3f79552bcfda29

WEB

https://git.kernel.org/stable/c/ad338d825e3f7b96ee542bf313728af2d19fe9ad

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2021-47087

CVSS Analysis