CVE-2021-47150

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47150
In the Linux kernel, the following vulnerability has been resolved: net: fec: fix the potential memory leak in fec_enet_init() If the memory allocated for cbd_base is failed, it should free the memory allocated for the queues, otherwise it causes memory leak. And if the memory allocated for the queues is failed, it can return error directly.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/15102886bc8f5f29daaadf2d925591d564c17e9f Patch
https://git.kernel.org/stable/c/20255d41ac560397b6a07d8d87dcc5e2efc7672a Patch
https://git.kernel.org/stable/c/32a1777fd113335c3f70dc445dffee0ad1c6870f Patch
https://git.kernel.org/stable/c/619fee9eb13b5d29e4267cb394645608088c28a8 Patch
https://git.kernel.org/stable/c/8ee7ef4a57a9e1228b6f345aaa70aa8951c7e9cd Patch
https://git.kernel.org/stable/c/15102886bc8f5f29daaadf2d925591d564c17e9f Patch
https://git.kernel.org/stable/c/20255d41ac560397b6a07d8d87dcc5e2efc7672a Patch
https://git.kernel.org/stable/c/32a1777fd113335c3f70dc445dffee0ad1c6870f Patch
https://git.kernel.org/stable/c/619fee9eb13b5d29e4267cb394645608088c28a8 Patch
https://git.kernel.org/stable/c/8ee7ef4a57a9e1228b6f345aaa70aa8951c7e9cd Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
History

12 Dec 2024, 15:41

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/15102886bc8f5f29daaadf2d925591d564c17e9f - () https://git.kernel.org/stable/c/15102886bc8f5f29daaadf2d925591d564c17e9f - Patch
References () https://git.kernel.org/stable/c/20255d41ac560397b6a07d8d87dcc5e2efc7672a - () https://git.kernel.org/stable/c/20255d41ac560397b6a07d8d87dcc5e2efc7672a - Patch
References () https://git.kernel.org/stable/c/32a1777fd113335c3f70dc445dffee0ad1c6870f - () https://git.kernel.org/stable/c/32a1777fd113335c3f70dc445dffee0ad1c6870f - Patch
References () https://git.kernel.org/stable/c/619fee9eb13b5d29e4267cb394645608088c28a8 - () https://git.kernel.org/stable/c/619fee9eb13b5d29e4267cb394645608088c28a8 - Patch
References () https://git.kernel.org/stable/c/8ee7ef4a57a9e1228b6f345aaa70aa8951c7e9cd - () https://git.kernel.org/stable/c/8ee7ef4a57a9e1228b6f345aaa70aa8951c7e9cd - Patch
First Time Linux
Linux linux Kernel
CWE CWE-401
CPE cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/15102886bc8f5f29daaadf2d925591d564c17e9f - () https://git.kernel.org/stable/c/15102886bc8f5f29daaadf2d925591d564c17e9f -
References () https://git.kernel.org/stable/c/20255d41ac560397b6a07d8d87dcc5e2efc7672a - () https://git.kernel.org/stable/c/20255d41ac560397b6a07d8d87dcc5e2efc7672a -
References () https://git.kernel.org/stable/c/32a1777fd113335c3f70dc445dffee0ad1c6870f - () https://git.kernel.org/stable/c/32a1777fd113335c3f70dc445dffee0ad1c6870f -
References () https://git.kernel.org/stable/c/619fee9eb13b5d29e4267cb394645608088c28a8 - () https://git.kernel.org/stable/c/619fee9eb13b5d29e4267cb394645608088c28a8 -
References () https://git.kernel.org/stable/c/8ee7ef4a57a9e1228b6f345aaa70aa8951c7e9cd - () https://git.kernel.org/stable/c/8ee7ef4a57a9e1228b6f345aaa70aa8951c7e9cd -

25 Mar 2024, 13:47

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: fec: soluciona la posible pérdida de memoria en fec_enet_init() Si la memoria asignada para cbd_base falla, debería liberar la memoria asignada para las colas; de lo contrario, provoca una pérdida de memoria. Y si falla la memoria asignada para las colas, puede devolver un error directamente.

25 Mar 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-25 09:15

Updated : 2024-12-12 15:41

NVD link : CVE-2021-47150

Mitre link : CVE-2021-47150

CVE.ORG link : CVE-2021-47150

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime