CVE-2021-47527

In the Linux kernel, the following vulnerability has been resolved: serial: core: fix transmit-buffer reset and memleak Commit 761ed4a94582 ("tty: serial_core: convert uart_close to use tty_port_close") converted serial core to use tty_port_close() but failed to notice that the transmit buffer still needs to be freed on final close. Not freeing the transmit buffer means that the buffer is no longer cleared on next open so that any ioctl() waiting for the buffer to drain might wait indefinitely (e.g. on termios changes) or that stale data can end up being transmitted in case tx is restarted. Furthermore, the buffer of any port that has been opened would leak on driver unbind. Note that the port lock is held when clearing the buffer pointer due to the ldisc race worked around by commit a5ba1d95e46e ("uart: fix race between uart_put_char() and uart_shutdown()"). Also note that the tty-port shutdown() callback is not called for console ports so it is not strictly necessary to free the buffer page after releasing the lock (cf. d72402145ace ("tty/serial: do not free trasnmit buffer page under port lock")).

• CWE-401

• https://git.kernel.org/stable/c/00de977f9e0aa9760d9a79d1e41ff780f74e3424Patch
• https://git.kernel.org/stable/c/011f6c92b5bf6e1fbfdedc8b5232f64c1c493206Patch
• https://git.kernel.org/stable/c/1179b168fa3f3a6aae3bd140000455a0e58457dbPatch
• https://git.kernel.org/stable/c/64e491c1634b73d3bddc081d08620bdc92ab2c12Patch
• https://git.kernel.org/stable/c/c5da8aa441053958594f94254592bb41264bdfbfPatch
• https://git.kernel.org/stable/c/e1722acf4f0d4d67b60f57e08ce16f8b66cd4b8fPatch
• https://git.kernel.org/stable/c/e74d9663fd57640fc3394abb5c76fa95b9cc2f2ePatch
• https://git.kernel.org/stable/c/00de977f9e0aa9760d9a79d1e41ff780f74e3424Patch
• https://git.kernel.org/stable/c/011f6c92b5bf6e1fbfdedc8b5232f64c1c493206Patch
• https://git.kernel.org/stable/c/1179b168fa3f3a6aae3bd140000455a0e58457dbPatch
• https://git.kernel.org/stable/c/64e491c1634b73d3bddc081d08620bdc92ab2c12Patch
• https://git.kernel.org/stable/c/c5da8aa441053958594f94254592bb41264bdfbfPatch
• https://git.kernel.org/stable/c/e1722acf4f0d4d67b60f57e08ce16f8b66cd4b8fPatch
• https://git.kernel.org/stable/c/e74d9663fd57640fc3394abb5c76fa95b9cc2f2ePatch

Published

May 24, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-47521In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2021-47522In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47523In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47524In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47525In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2021-47526In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47528In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47529In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47530In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47531In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47532In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47533In the Linux kernel, the following vulnerability has been re…7.8