CVE-2021-47071

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47071
In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Fix a memory leak in error handling paths If 'vmbus_establish_gpadl()' fails, the (recv|send)_gpadl will not be updated and 'hv_uio_cleanup()' in the error handling path will not be able to free the corresponding buffer. In such a case, we need to free the buffer explicitly.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3ee098f96b8b6c1a98f7f97915f8873164e6af9d Patch
https://git.kernel.org/stable/c/53486c467e356e06aa37047c984fccd64d78c827 Patch
https://git.kernel.org/stable/c/cdd91637d4ef33e2be19a8e16e72e7d00c996d76 Patch
https://git.kernel.org/stable/c/d84b5e912212b05f6b5bde9f682046accfbe0354 Patch
https://git.kernel.org/stable/c/3ee098f96b8b6c1a98f7f97915f8873164e6af9d Patch
https://git.kernel.org/stable/c/53486c467e356e06aa37047c984fccd64d78c827 Patch
https://git.kernel.org/stable/c/cdd91637d4ef33e2be19a8e16e72e7d00c996d76 Patch
https://git.kernel.org/stable/c/d84b5e912212b05f6b5bde9f682046accfbe0354 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
History

12 Dec 2024, 14:43

Type Values Removed Values Added
CWE CWE-401
References () https://git.kernel.org/stable/c/3ee098f96b8b6c1a98f7f97915f8873164e6af9d - () https://git.kernel.org/stable/c/3ee098f96b8b6c1a98f7f97915f8873164e6af9d - Patch
References () https://git.kernel.org/stable/c/53486c467e356e06aa37047c984fccd64d78c827 - () https://git.kernel.org/stable/c/53486c467e356e06aa37047c984fccd64d78c827 - Patch
References () https://git.kernel.org/stable/c/cdd91637d4ef33e2be19a8e16e72e7d00c996d76 - () https://git.kernel.org/stable/c/cdd91637d4ef33e2be19a8e16e72e7d00c996d76 - Patch
References () https://git.kernel.org/stable/c/d84b5e912212b05f6b5bde9f682046accfbe0354 - () https://git.kernel.org/stable/c/d84b5e912212b05f6b5bde9f682046accfbe0354 - Patch
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

21 Nov 2024, 06:35

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: uio_hv_generic: corrige una pérdida de memoria en las rutas de manejo de errores. Si falla 'vmbus_establecer_gpadl()', (recv|send)_gpadl no se actualizará y aparecerá 'hv_uio_cleanup()' en el error La ruta de manejo no podrá liberar el búfer correspondiente. En tal caso, necesitamos liberar el búfer explícitamente.
References () https://git.kernel.org/stable/c/3ee098f96b8b6c1a98f7f97915f8873164e6af9d - () https://git.kernel.org/stable/c/3ee098f96b8b6c1a98f7f97915f8873164e6af9d -
References () https://git.kernel.org/stable/c/53486c467e356e06aa37047c984fccd64d78c827 - () https://git.kernel.org/stable/c/53486c467e356e06aa37047c984fccd64d78c827 -
References () https://git.kernel.org/stable/c/cdd91637d4ef33e2be19a8e16e72e7d00c996d76 - () https://git.kernel.org/stable/c/cdd91637d4ef33e2be19a8e16e72e7d00c996d76 -
References () https://git.kernel.org/stable/c/d84b5e912212b05f6b5bde9f682046accfbe0354 - () https://git.kernel.org/stable/c/d84b5e912212b05f6b5bde9f682046accfbe0354 -

01 Mar 2024, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-01 22:15

Updated : 2024-12-12 14:43

NVD link : CVE-2021-47071

Mitre link : CVE-2021-47071

CVE.ORG link : CVE-2021-47071

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime