What’s Vulnerable › Vulnerabilities
CVE-2021-47437: iio: adis16475: fix deadlock on frequency set
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-05-22 · updated 2026-06-17
- Weakness: CWE-667
Description
In the Linux kernel, the following vulnerability has been resolved: iio: adis16475: fix deadlock on frequency set With commit 39c024b51b560 ("iio: adis16475: improve sync scale mode handling"), two deadlocks were introduced: 1) The call to 'adis_write_reg_16()' was not changed to it's unlocked version. 2) The lock was not being released on the success path of the function. This change fixes both these issues.
Affected products
- Linux kernel: from 5.13 before 5.14.14; 5.15-rc1, 5.15-rc2, 5.15-rc3, 5.15-rc4, 5.15-rc5 — fixed in 5.14.14
How to fix
Upgrade to a fixed version: Linux kernel 5.14.14. Check the vendor advisory for mitigations.
References
- https://git.kernel.org/stable/c/04e03b907022ebd876f422f17efcc2c6cc934dc6
- https://git.kernel.org/stable/c/9da1b86865ab4376408c58cd9fec332c8bdb5c73
- https://git.kernel.org/stable/c/04e03b907022ebd876f422f17efcc2c6cc934dc6
- https://git.kernel.org/stable/c/9da1b86865ab4376408c58cd9fec332c8bdb5c73
Get alerted when CVE-2021-47437 or the next vulnerability affects your stack