CVE-2021-47470: 
Linux Kernel vulnerability analysis and mitigation

CVE-2021-47470 is a use-after-free vulnerability in the Linux kernel's SLUB memory allocator. The vulnerability was discovered in the slab_debugfs_fops functionality and affects Linux kernel versions from 5.14 through 5.14.15, as well as 5.15-rc1 through 5.15-rc6. The issue occurs when sysfs_slab_add fails, leading to a potential use-after-free condition when debugfs_slab_add() is called (NVD).

The vulnerability stems from improper memory management in the SLUB allocator's debugfs operations. When sysfs_slab_add() fails, the code incorrectly proceeds to call debugfs_slab_add() for the slab structure 's', despite 's' being scheduled for deallocation. This leads to a use-after-free condition as slab_debugfs_fops attempts to use the freed memory later. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (NVD).

The vulnerability could allow an authenticated local attacker to potentially achieve privilege escalation through memory corruption. The use-after-free condition could lead to system crashes or potentially allow an attacker to execute arbitrary code with elevated privileges (NVD).

The vulnerability requires local access and low privileges to exploit. No known public exploits have been identified at the time of reporting (NVD).

The vulnerability has been fixed in the Linux kernel through a patch that properly handles the error case in sysfs_slab_add(). The fix ensures that debugfs_slab_add() is not called when sysfs_slab_add() fails, preventing the use-after-free condition. Users should upgrade to patched kernel versions (Kernel Patch).