CVE-2021-47093

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47093
In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel_pmc_core: fix memleak on registration failure In case device registration fails during module initialisation, the platform device structure needs to be freed using platform_device_put() to properly free all resources (e.g. the device name).

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/26a8b09437804fabfb1db080d676b96c0de68e7c Patch
https://git.kernel.org/stable/c/7a37f2e370699e2feca3dca6c8178c71ceee7e8a Patch
https://git.kernel.org/stable/c/9ca1324755f1f8629a370af5cc315b175331f5d1 Patch
https://git.kernel.org/stable/c/26a8b09437804fabfb1db080d676b96c0de68e7c Patch
https://git.kernel.org/stable/c/7a37f2e370699e2feca3dca6c8178c71ceee7e8a Patch
https://git.kernel.org/stable/c/9ca1324755f1f8629a370af5cc315b175331f5d1 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc6:*:*:*:*:*:*
History

14 Jan 2025, 15:39

Type Values Removed Values Added
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/26a8b09437804fabfb1db080d676b96c0de68e7c - () https://git.kernel.org/stable/c/26a8b09437804fabfb1db080d676b96c0de68e7c - Patch
References () https://git.kernel.org/stable/c/7a37f2e370699e2feca3dca6c8178c71ceee7e8a - () https://git.kernel.org/stable/c/7a37f2e370699e2feca3dca6c8178c71ceee7e8a - Patch
References () https://git.kernel.org/stable/c/9ca1324755f1f8629a370af5cc315b175331f5d1 - () https://git.kernel.org/stable/c/9ca1324755f1f8629a370af5cc315b175331f5d1 - Patch

21 Nov 2024, 06:35

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: plataforma/x86: intel_pmc_core: corrige memleak en falla de registro En caso de que el registro del dispositivo falle durante la inicialización del módulo, la estructura del dispositivo de la plataforma debe liberarse usando platform_device_put() para liberar adecuadamente todos los recursos ( por ejemplo, el nombre del dispositivo).
References () https://git.kernel.org/stable/c/26a8b09437804fabfb1db080d676b96c0de68e7c - () https://git.kernel.org/stable/c/26a8b09437804fabfb1db080d676b96c0de68e7c -
References () https://git.kernel.org/stable/c/7a37f2e370699e2feca3dca6c8178c71ceee7e8a - () https://git.kernel.org/stable/c/7a37f2e370699e2feca3dca6c8178c71ceee7e8a -
References () https://git.kernel.org/stable/c/9ca1324755f1f8629a370af5cc315b175331f5d1 - () https://git.kernel.org/stable/c/9ca1324755f1f8629a370af5cc315b175331f5d1 -

04 Mar 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-04 18:15

Updated : 2025-01-14 15:39

NVD link : CVE-2021-47093

Mitre link : CVE-2021-47093

CVE.ORG link : CVE-2021-47093

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime