CVE Database›Document archive›CVE-2021-47483

CVE-2021-47483

kernel: regmap: Fix possible double-free in regcache_rbtree_exit()

Loading…

Severity

Low

Red Hat Product Security

4.4

CVSS 3.1

Review impact separately from score.

Published · May 22, 2024

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's regmap subsystem. When memory reallocation fails during register cache block initialization, the error-handling path incorrectly attempts to release memory that has already been freed. A local privileged user could trigger this double-free condition during device probing, leading to a Denial of Service (DoS) via a kernel crash or potential memory corruption.

Statement

This vulnerability is rated as having a Low severity impact on Red Hat Enterprise Linux because successful exploitation requires elevated privileges, specific hardware interaction, and forced system memory exhaustion during driver probing. The register cache mechanism is invoked internally by kernel drivers during device setup, meaning unprivileged users cannot directly trigger this error path under standard operating conditions. Consequently, the practical risk is largely limited to a local denial of service that demands administrative access or specialized hardware to trigger.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.4
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-415 · Double Free