CVE-2021-47073

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Mar 1, 2024
Updated: Jan 9, 2025

Summary

CVE-2021-47073 is a vulnerability affecting the Linux kernel's dell-smbios-wmi driver. The issue arises due to the inconsistency between the driver registration and unregistration processes. Specifically, the driver is unregistered unconditionally in the exit function, whereas it is registered only on systems with Dell WMI interface support. This inconsistency results in an unexpected driver unregisteration warning and an oops (out of memory) error. To mitigate this issue, the unregister process should be made conditional, aligning with the registration condition.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share