CVE-2021-47330

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47330
In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: serial_cs: Fix a memory leak in error handling path In the probe function, if the final 'serial_config()' fails, 'info' is leaking. Add a resource handling path to free this memory.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/331f5923fce4f45b8170ccf06c529e8eb28f37bc Patch
https://git.kernel.org/stable/c/34f4590f5ec9859ea9136249f528173d150bd584 Patch
https://git.kernel.org/stable/c/7a80f71601af015856a0aeb1e3c294037ac3dd32 Patch
https://git.kernel.org/stable/c/b2ef1f5de40342de44fc5355321595f91774dab5 Patch
https://git.kernel.org/stable/c/b5a2799cd62ed30c81b22c23028d9ee374e2138c Patch
https://git.kernel.org/stable/c/c39cf4df19acf0133fa284a8cd83fad42cd13cc2 Patch
https://git.kernel.org/stable/c/cddee5c287e26f6b2ba5c0ffdfc3a846f2f10461 Patch
https://git.kernel.org/stable/c/ee16bed959862a6de2913f71a04cb563d7237b67 Patch
https://git.kernel.org/stable/c/fad92b11047a748c996ebd6cfb164a63814eeb2e Patch
https://git.kernel.org/stable/c/331f5923fce4f45b8170ccf06c529e8eb28f37bc Patch
https://git.kernel.org/stable/c/34f4590f5ec9859ea9136249f528173d150bd584 Patch
https://git.kernel.org/stable/c/7a80f71601af015856a0aeb1e3c294037ac3dd32 Patch
https://git.kernel.org/stable/c/b2ef1f5de40342de44fc5355321595f91774dab5 Patch
https://git.kernel.org/stable/c/b5a2799cd62ed30c81b22c23028d9ee374e2138c Patch
https://git.kernel.org/stable/c/c39cf4df19acf0133fa284a8cd83fad42cd13cc2 Patch
https://git.kernel.org/stable/c/cddee5c287e26f6b2ba5c0ffdfc3a846f2f10461 Patch
https://git.kernel.org/stable/c/ee16bed959862a6de2913f71a04cb563d7237b67 Patch
https://git.kernel.org/stable/c/fad92b11047a748c996ebd6cfb164a63814eeb2e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

24 Dec 2024, 16:17

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/331f5923fce4f45b8170ccf06c529e8eb28f37bc - () https://git.kernel.org/stable/c/331f5923fce4f45b8170ccf06c529e8eb28f37bc - Patch
References () https://git.kernel.org/stable/c/34f4590f5ec9859ea9136249f528173d150bd584 - () https://git.kernel.org/stable/c/34f4590f5ec9859ea9136249f528173d150bd584 - Patch
References () https://git.kernel.org/stable/c/7a80f71601af015856a0aeb1e3c294037ac3dd32 - () https://git.kernel.org/stable/c/7a80f71601af015856a0aeb1e3c294037ac3dd32 - Patch
References () https://git.kernel.org/stable/c/b2ef1f5de40342de44fc5355321595f91774dab5 - () https://git.kernel.org/stable/c/b2ef1f5de40342de44fc5355321595f91774dab5 - Patch
References () https://git.kernel.org/stable/c/b5a2799cd62ed30c81b22c23028d9ee374e2138c - () https://git.kernel.org/stable/c/b5a2799cd62ed30c81b22c23028d9ee374e2138c - Patch
References () https://git.kernel.org/stable/c/c39cf4df19acf0133fa284a8cd83fad42cd13cc2 - () https://git.kernel.org/stable/c/c39cf4df19acf0133fa284a8cd83fad42cd13cc2 - Patch
References () https://git.kernel.org/stable/c/cddee5c287e26f6b2ba5c0ffdfc3a846f2f10461 - () https://git.kernel.org/stable/c/cddee5c287e26f6b2ba5c0ffdfc3a846f2f10461 - Patch
References () https://git.kernel.org/stable/c/ee16bed959862a6de2913f71a04cb563d7237b67 - () https://git.kernel.org/stable/c/ee16bed959862a6de2913f71a04cb563d7237b67 - Patch
References () https://git.kernel.org/stable/c/fad92b11047a748c996ebd6cfb164a63814eeb2e - () https://git.kernel.org/stable/c/fad92b11047a748c996ebd6cfb164a63814eeb2e - Patch

21 Nov 2024, 06:35

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tty: serial: 8250: serial_cs: corrige una pérdida de memoria en la ruta de manejo de errores. En la función de sonda, si el 'serial_config()' final falla, se está perdiendo 'info'. Agregue una ruta de manejo de recursos para liberar esta memoria.
References () https://git.kernel.org/stable/c/331f5923fce4f45b8170ccf06c529e8eb28f37bc - () https://git.kernel.org/stable/c/331f5923fce4f45b8170ccf06c529e8eb28f37bc -
References () https://git.kernel.org/stable/c/34f4590f5ec9859ea9136249f528173d150bd584 - () https://git.kernel.org/stable/c/34f4590f5ec9859ea9136249f528173d150bd584 -
References () https://git.kernel.org/stable/c/7a80f71601af015856a0aeb1e3c294037ac3dd32 - () https://git.kernel.org/stable/c/7a80f71601af015856a0aeb1e3c294037ac3dd32 -
References () https://git.kernel.org/stable/c/b2ef1f5de40342de44fc5355321595f91774dab5 - () https://git.kernel.org/stable/c/b2ef1f5de40342de44fc5355321595f91774dab5 -
References () https://git.kernel.org/stable/c/b5a2799cd62ed30c81b22c23028d9ee374e2138c - () https://git.kernel.org/stable/c/b5a2799cd62ed30c81b22c23028d9ee374e2138c -
References () https://git.kernel.org/stable/c/c39cf4df19acf0133fa284a8cd83fad42cd13cc2 - () https://git.kernel.org/stable/c/c39cf4df19acf0133fa284a8cd83fad42cd13cc2 -
References () https://git.kernel.org/stable/c/cddee5c287e26f6b2ba5c0ffdfc3a846f2f10461 - () https://git.kernel.org/stable/c/cddee5c287e26f6b2ba5c0ffdfc3a846f2f10461 -
References () https://git.kernel.org/stable/c/ee16bed959862a6de2913f71a04cb563d7237b67 - () https://git.kernel.org/stable/c/ee16bed959862a6de2913f71a04cb563d7237b67 -
References () https://git.kernel.org/stable/c/fad92b11047a748c996ebd6cfb164a63814eeb2e - () https://git.kernel.org/stable/c/fad92b11047a748c996ebd6cfb164a63814eeb2e -

21 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 15:15

Updated : 2024-12-24 16:17

NVD link : CVE-2021-47330

Mitre link : CVE-2021-47330

CVE.ORG link : CVE-2021-47330

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime