CVE-2021-47500

A flaw was found in the Linux kernel mma8452 accelerometer driver. The driver assigns an IIO trigger without taking a reference, so a later iio_trigger_put() can free the trigger while it is still in use. A local user of that sensor can cause a use-after-free and crash the system.

Following issue marked as moderate with "not affected" for Red Hat Enterprise Linux, as it is not vulnerable to this CVE. This is because the CVE does not impact the versions or configurations of the Linux kernel used in Red Hat's distributions. Additionally, some RHEL versions may be marked as "will not fix" due to the minimal impact of the issue, and no fix will be provided.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.