CVE-2021-47357

In the Linux kernel, the following vulnerability has been resolved: atm: iphase: fix possible use-after-free in ia_module_exit() This module's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free. Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.

• CWE-416

• https://git.kernel.org/stable/c/1c72e6ab66b9598cac741ed397438a52065a8f1fPatch
• https://git.kernel.org/stable/c/89ce0b0747f319eb70f85bc820dcc43cebbd5417Patch
• https://git.kernel.org/stable/c/9e161687855175334ca93c6c3ccb221731194479Patch
• https://git.kernel.org/stable/c/a832ee2f2145f57443b2d565f8cb5490e8339f42Patch
• https://git.kernel.org/stable/c/b58d246a058ae88484758cd4ab27b3180fd5ecf8Patch
• https://git.kernel.org/stable/c/bcdd2be48edd8c6867fb44112cb8d18086beae29Patch
• https://git.kernel.org/stable/c/c9172498d4d62c9b64e5fb37c1ee0343e65fe51bPatch
• https://git.kernel.org/stable/c/d1fb12412874c94ad037e11d0ecdd1140a439297Patch
• https://git.kernel.org/stable/c/e759ff76ebbbfcdcf83b6634c54dc47828573d8bPatch
• https://git.kernel.org/stable/c/1c72e6ab66b9598cac741ed397438a52065a8f1fPatch
• https://git.kernel.org/stable/c/89ce0b0747f319eb70f85bc820dcc43cebbd5417Patch
• https://git.kernel.org/stable/c/9e161687855175334ca93c6c3ccb221731194479Patch
• https://git.kernel.org/stable/c/a832ee2f2145f57443b2d565f8cb5490e8339f42Patch
• https://git.kernel.org/stable/c/b58d246a058ae88484758cd4ab27b3180fd5ecf8Patch
• https://git.kernel.org/stable/c/bcdd2be48edd8c6867fb44112cb8d18086beae29Patch
• https://git.kernel.org/stable/c/c9172498d4d62c9b64e5fb37c1ee0343e65fe51bPatch
• https://git.kernel.org/stable/c/d1fb12412874c94ad037e11d0ecdd1140a439297Patch
• https://git.kernel.org/stable/c/e759ff76ebbbfcdcf83b6634c54dc47828573d8bPatch

Published

May 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-47351In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47352In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2021-47353In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47354In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2021-47355In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2021-47356In the Linux kernel, the following vulnerability has been re…7.7
• CVE-2021-47358In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2021-47359In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47360In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47361In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2021-47362In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47363In the Linux kernel, the following vulnerability has been re…5.5