CVE-2021-47073

platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios init_dell_smbios_wmi() only registers the dell_smbios_wmi_driver on systems where the Dell WMI interface is supported. While exit_dell_smbios_wmi() unregisters it unconditionally, this leads to the following oops: [ 175.722921] ------------[ cut here ]------------ [ 175.722925] Unexpected driver unregister! [ 175.722939] WARNING: CPU: 1 PID: 3630 at drivers/base/driver.c:194 driver_unregister+0x38/0x40 ... [ 175.723089] Call Trace: [ 175.723094] cleanup_module+0x5/0xedd [dell_smbios] ... [ 175.723148] ---[ end trace 064c34e1ad49509d ]--- Make the unregister happen on the same condition the register happens to fix this.

5.5

CVSS

Severity: Medium

CVSS 3.1 •

EPSS 0.01%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/75cfc833da4a2111106d4c134e93e0c7f41e35e7	patch
https://git.kernel.org/stable/c/6fa78a6b9a3beb676a010dc489c1257f7e432525	patch
https://git.kernel.org/stable/c/0cf036a0d325200e6c27b90908e51195bbc557b1	patch
https://git.kernel.org/stable/c/8d746ea7c687bab060a2c05a35c449302406cd52	patch
https://git.kernel.org/stable/c/3a53587423d25c87af4b4126a806a0575104b45e	patch

Frequently Asked Questions

What is the severity of CVE-2021-47073?: CVE-2021-47073 has been scored as a medium severity vulnerability.
How to fix CVE-2021-47073?: To fix CVE-2021-47073, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2021-47073 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2021-47073 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2021-47073?: CVE-2021-47073 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.