CVE-2021-47524: 
Linux Kernel vulnerability analysis and mitigation

CVE-2021-47524 is a vulnerability in the Linux kernel's LiteUART driver that was discovered and disclosed in May 2024. The vulnerability involves a minor-number leak that occurs during probe errors in the serial LiteUART driver. This issue affects the Linux kernel's serial driver subsystem (Kernel Git).

The vulnerability stems from a failure to release allocated minor numbers before returning on probe errors in the LiteUART driver. The issue was introduced in commit 1da81e5562fa ("drivers/tty/serial: add LiteUART driver"). The fix involves modifying the error handling path in the liteuart_probe function to properly release resources by calling xa_erase on the liteuart_array before returning from error conditions (Kernel Git).

The vulnerability could lead to resource leaks in the Linux kernel when errors occur during the probing of LiteUART devices. This may result in system resource exhaustion over time if the probe errors occur repeatedly.

No known public exploits have been reported for this vulnerability. The issue requires local access to a system with the LiteUART driver and the ability to trigger probe errors.

The vulnerability has been patched in the Linux kernel. The fix ensures proper cleanup of allocated minor numbers during probe errors by adding appropriate error handling code. Users should update their Linux kernel to a version that includes the fix (Kernel Git).