CVE-2021-47655

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47655
In the Linux kernel, the following vulnerability has been resolved: media: venus: vdec: fixed possible memory leak issue The venus_helper_alloc_dpb_bufs() implementation allows an early return on an error path when checking the id from ida_alloc_min() which would not release the earlier buffer allocation. Move the direct kfree() from the error checking of dma_alloc_attrs() to the common fail path to ensure that allocations are released on all error paths in this function. Addresses-Coverity: 1494120 ("Resource leak")

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/55bccafc246b2e64763a155ec454470c07a54a6e Patch
https://git.kernel.org/stable/c/5cedfe8aaf1875a5305897107b7f298db4260019 Patch
https://git.kernel.org/stable/c/5f89d05ba93df9c2cdfe493843f93288e55e99eb Patch
https://git.kernel.org/stable/c/8403fdd775858a7bf04868d43daea0acbe49ddfc Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Mar 2025, 18:50

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: venus: vdec: se ha corregido un posible problema de pérdida de memoria La implementación de venus_helper_alloc_dpb_bufs() permite un retorno temprano a una ruta de error al verificar el id de ida_alloc_min(), lo que no liberaría la asignación de búfer anterior. Mueva el kfree() directo de la verificación de errores de dma_alloc_attrs() a la ruta de error común para garantizar que se liberen las asignaciones en todas las rutas de error en esta función. Addresses-Coverity: 1494120 ("Fuga de recursos")
References () https://git.kernel.org/stable/c/55bccafc246b2e64763a155ec454470c07a54a6e - () https://git.kernel.org/stable/c/55bccafc246b2e64763a155ec454470c07a54a6e - Patch
References () https://git.kernel.org/stable/c/5cedfe8aaf1875a5305897107b7f298db4260019 - () https://git.kernel.org/stable/c/5cedfe8aaf1875a5305897107b7f298db4260019 - Patch
References () https://git.kernel.org/stable/c/5f89d05ba93df9c2cdfe493843f93288e55e99eb - () https://git.kernel.org/stable/c/5f89d05ba93df9c2cdfe493843f93288e55e99eb - Patch
References () https://git.kernel.org/stable/c/8403fdd775858a7bf04868d43daea0acbe49ddfc - () https://git.kernel.org/stable/c/8403fdd775858a7bf04868d43daea0acbe49ddfc - Patch

26 Feb 2025, 06:37

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 06:37

Updated : 2025-10-01 20:15

NVD link : CVE-2021-47655

Mitre link : CVE-2021-47655

CVE.ORG link : CVE-2021-47655

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime