CVE-2021-47500: iio: mma8452: Fix trigger reference couting
Vulnerability summary
CVE-2021-47500 is a high (CVSS 7.8) Use After Free vulnerability in linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 15.5% of scored vulnerabilities.
Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 16 · Related 16Timeline
- 24-05-2024PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: iio: mma8452: Fix trigger reference couting The mma8452 driver directly assigns a trigger to the struct iio_dev. The IIO core when done using this trigger will call `iio_trigger_put()` to drop the reference count by 1. Without the matching `iio_trigger_get()` in the driver the reference count can reach 0 too early, the trigger gets freed while still in use and a use-after-free occurs. Fix this by getting a reference to the trigger before assigning it to the IIO device.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.24%
Chance of exploitation in the next 30 days
Percentile
16%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.24% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu88 products
- linux< 4.4.0-268.302 | < 4.15.0-169.177 | < 5.4.0-100.113
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 4.4.0-1143.149 | < 4.4.0-1181.196 | < 4.15.0-1121.129 | < 5.4.0-1066.69
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ ae6d9ce05691bf79694074db7c7da980080548af, < 094d513b78b1714113bc016684b8142382e071ba | ≥ ae6d9ce05691bf79694074db7c7da980080548af, < fb75cc4740d81264cd5bcb0e17d961d018a8be96 | ≥ ae6d9ce05691bf79694074db7c7da980080548af, < 794c0898f6bf39a458655d5fb4af70ec43a5cfcb | ≥ ae6d9ce05691bf79694074db7c7da980080548af, < f5deab10ced368c807866283f8b79144c4823be8 | ≥ ae6d9ce05691bf79694074db7c7da980080548af, < acf0088ac073ca6e7f4cad6acac112177e08df5e | ≥ ae6d9ce05691bf79694074db7c7da980080548af, < db12d95085367de8b0223929d1332731024441f1 | ≥ ae6d9ce05691bf79694074db7c7da980080548af, < c43517071dfc9fce34f8f69dbb98a86017f6b739 | ≥ ae6d9ce05691bf79694074db7c7da980080548af, < cd0082235783f814241a1c9483fb89e405f4f892 | 4.2
- linux_kernel≥ 4.2, < 4.4.295 | ≥ 4.5, < 4.9.293 | ≥ 4.10, < 4.14.258 | ≥ 4.15, < 4.19.221 | ≥ 4.20, < 5.4.165 | ≥ 5.5, < 5.10.85 | ≥ 5.11, < 5.15.8 | 5.15:rc1 | 5.15:rc2 | 5.15:rc3 | 5.15:rc4
Debian1 product
- linux< 5.15.15-1
3 vendors · 91 products
