CVE-2021-47043

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47043
In the Linux kernel, the following vulnerability has been resolved: media: venus: core: Fix some resource leaks in the error path of 'venus_probe()' If an error occurs after a successful 'of_icc_get()' call, it must be undone. Use 'devm_of_icc_get()' instead of 'of_icc_get()' to avoid the leak. Update the remove function accordingly and axe the now unneeded 'icc_put()' calls.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/00b68a7478343afdf83f30c43e64db5296057030 Patch
https://git.kernel.org/stable/c/5a465c5391a856a0c1e9554964d660676c35d1b2 Patch
https://git.kernel.org/stable/c/711acdf0228dc71601247f28b56f13e850e395c8 Patch
https://git.kernel.org/stable/c/940d01eceb3a7866fbfca136a55a5625fc75a565 Patch
https://git.kernel.org/stable/c/00b68a7478343afdf83f30c43e64db5296057030 Patch
https://git.kernel.org/stable/c/5a465c5391a856a0c1e9554964d660676c35d1b2 Patch
https://git.kernel.org/stable/c/711acdf0228dc71601247f28b56f13e850e395c8 Patch
https://git.kernel.org/stable/c/940d01eceb3a7866fbfca136a55a5625fc75a565 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

09 Jan 2025, 15:21

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/00b68a7478343afdf83f30c43e64db5296057030 - () https://git.kernel.org/stable/c/00b68a7478343afdf83f30c43e64db5296057030 - Patch
References () https://git.kernel.org/stable/c/5a465c5391a856a0c1e9554964d660676c35d1b2 - () https://git.kernel.org/stable/c/5a465c5391a856a0c1e9554964d660676c35d1b2 - Patch
References () https://git.kernel.org/stable/c/711acdf0228dc71601247f28b56f13e850e395c8 - () https://git.kernel.org/stable/c/711acdf0228dc71601247f28b56f13e850e395c8 - Patch
References () https://git.kernel.org/stable/c/940d01eceb3a7866fbfca136a55a5625fc75a565 - () https://git.kernel.org/stable/c/940d01eceb3a7866fbfca136a55a5625fc75a565 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-Other
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/00b68a7478343afdf83f30c43e64db5296057030 - () https://git.kernel.org/stable/c/00b68a7478343afdf83f30c43e64db5296057030 -
References () https://git.kernel.org/stable/c/5a465c5391a856a0c1e9554964d660676c35d1b2 - () https://git.kernel.org/stable/c/5a465c5391a856a0c1e9554964d660676c35d1b2 -
References () https://git.kernel.org/stable/c/711acdf0228dc71601247f28b56f13e850e395c8 - () https://git.kernel.org/stable/c/711acdf0228dc71601247f28b56f13e850e395c8 -
References () https://git.kernel.org/stable/c/940d01eceb3a7866fbfca136a55a5625fc75a565 - () https://git.kernel.org/stable/c/940d01eceb3a7866fbfca136a55a5625fc75a565 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: venus: core: corrige algunas fugas de recursos en la ruta de error de 'venus_probe()' Si se produce un error después de una llamada exitosa a 'of_icc_get()', se debe deshacer . Utilice 'devm_of_icc_get()' en lugar de 'of_icc_get()' para evitar la fuga. Actualice la función de eliminación en consecuencia y elimine las llamadas 'icc_put()' ahora innecesarias.

28 Feb 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-28 09:15

Updated : 2025-01-09 15:21

NVD link : CVE-2021-47043

Mitre link : CVE-2021-47043

CVE.ORG link : CVE-2021-47043

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other