CVE Vulnerabilities

CVE-2021-47048

Published: Feb 28, 2024 | Modified: Feb 28, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

In the Linux kernel, the following vulnerability has been resolved:

spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op

When handling op->addr, it is using the buffer tmpbuf which has been freed. This will trigger a use-after-free KASAN warning. Lets use temporary variables to store op->addr.val and op->cmd.opcode to fix this issue.

References