CVE-2021-47443

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47443
In the Linux kernel, the following vulnerability has been resolved: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() 'params' is allocated in digital_tg_listen_mdaa(), but not free when digital_send_cmd() failed, which will cause memory leak. Fix it by freeing 'params' if digital_send_cmd() return failed.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3f2960b39f22e26cf8addae93c3f5884d1c183c9 Patch
https://git.kernel.org/stable/c/429054ec51e648d241a7e0b465cf44f6633334c5 Patch
https://git.kernel.org/stable/c/564249219e5b5673a8416b5181875d828c3f1e8c Patch
https://git.kernel.org/stable/c/58e7dcc9ca29c14e44267a4d0ea61e3229124907 Patch
https://git.kernel.org/stable/c/7ab488d7228a9dceb2456867f1f0919decf6efed Patch
https://git.kernel.org/stable/c/9881b0c860649f27ef2565deef011e516390f416 Patch
https://git.kernel.org/stable/c/a67d47e32c91e2b10402cb8c081774cbf08edb2e Patch
https://git.kernel.org/stable/c/b7b023e6ff567e991c31cd425b0e1d16779c938b Patch
https://git.kernel.org/stable/c/3f2960b39f22e26cf8addae93c3f5884d1c183c9 Patch
https://git.kernel.org/stable/c/429054ec51e648d241a7e0b465cf44f6633334c5 Patch
https://git.kernel.org/stable/c/564249219e5b5673a8416b5181875d828c3f1e8c Patch
https://git.kernel.org/stable/c/58e7dcc9ca29c14e44267a4d0ea61e3229124907 Patch
https://git.kernel.org/stable/c/7ab488d7228a9dceb2456867f1f0919decf6efed Patch
https://git.kernel.org/stable/c/9881b0c860649f27ef2565deef011e516390f416 Patch
https://git.kernel.org/stable/c/a67d47e32c91e2b10402cb8c081774cbf08edb2e Patch
https://git.kernel.org/stable/c/b7b023e6ff567e991c31cd425b0e1d16779c938b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*
History

02 Apr 2025, 15:12

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/3f2960b39f22e26cf8addae93c3f5884d1c183c9 - () https://git.kernel.org/stable/c/3f2960b39f22e26cf8addae93c3f5884d1c183c9 - Patch
References () https://git.kernel.org/stable/c/429054ec51e648d241a7e0b465cf44f6633334c5 - () https://git.kernel.org/stable/c/429054ec51e648d241a7e0b465cf44f6633334c5 - Patch
References () https://git.kernel.org/stable/c/564249219e5b5673a8416b5181875d828c3f1e8c - () https://git.kernel.org/stable/c/564249219e5b5673a8416b5181875d828c3f1e8c - Patch
References () https://git.kernel.org/stable/c/58e7dcc9ca29c14e44267a4d0ea61e3229124907 - () https://git.kernel.org/stable/c/58e7dcc9ca29c14e44267a4d0ea61e3229124907 - Patch
References () https://git.kernel.org/stable/c/7ab488d7228a9dceb2456867f1f0919decf6efed - () https://git.kernel.org/stable/c/7ab488d7228a9dceb2456867f1f0919decf6efed - Patch
References () https://git.kernel.org/stable/c/9881b0c860649f27ef2565deef011e516390f416 - () https://git.kernel.org/stable/c/9881b0c860649f27ef2565deef011e516390f416 - Patch
References () https://git.kernel.org/stable/c/a67d47e32c91e2b10402cb8c081774cbf08edb2e - () https://git.kernel.org/stable/c/a67d47e32c91e2b10402cb8c081774cbf08edb2e - Patch
References () https://git.kernel.org/stable/c/b7b023e6ff567e991c31cd425b0e1d16779c938b - () https://git.kernel.org/stable/c/b7b023e6ff567e991c31cd425b0e1d16779c938b - Patch
CPE cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CWE CWE-401

21 Nov 2024, 06:36

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/3f2960b39f22e26cf8addae93c3f5884d1c183c9 - () https://git.kernel.org/stable/c/3f2960b39f22e26cf8addae93c3f5884d1c183c9 -
References () https://git.kernel.org/stable/c/429054ec51e648d241a7e0b465cf44f6633334c5 - () https://git.kernel.org/stable/c/429054ec51e648d241a7e0b465cf44f6633334c5 -
References () https://git.kernel.org/stable/c/564249219e5b5673a8416b5181875d828c3f1e8c - () https://git.kernel.org/stable/c/564249219e5b5673a8416b5181875d828c3f1e8c -
References () https://git.kernel.org/stable/c/58e7dcc9ca29c14e44267a4d0ea61e3229124907 - () https://git.kernel.org/stable/c/58e7dcc9ca29c14e44267a4d0ea61e3229124907 -
References () https://git.kernel.org/stable/c/7ab488d7228a9dceb2456867f1f0919decf6efed - () https://git.kernel.org/stable/c/7ab488d7228a9dceb2456867f1f0919decf6efed -
References () https://git.kernel.org/stable/c/9881b0c860649f27ef2565deef011e516390f416 - () https://git.kernel.org/stable/c/9881b0c860649f27ef2565deef011e516390f416 -
References () https://git.kernel.org/stable/c/a67d47e32c91e2b10402cb8c081774cbf08edb2e - () https://git.kernel.org/stable/c/a67d47e32c91e2b10402cb8c081774cbf08edb2e -
References () https://git.kernel.org/stable/c/b7b023e6ff567e991c31cd425b0e1d16779c938b - () https://git.kernel.org/stable/c/b7b023e6ff567e991c31cd425b0e1d16779c938b -

06 Nov 2024, 17:35

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: NFC: digital: corrige una posible pérdida de memoria en digital_tg_listen_mdaa() Los 'params' se asignan en digital_tg_listen_mdaa(), pero no están libres cuando falla digital_send_cmd(), lo que provocará una pérdida de memoria. Solucionelo liberando 'params' si falla la devolución de digital_send_cmd().
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

22 May 2024, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-22 07:15

Updated : 2025-04-02 15:12

NVD link : CVE-2021-47443

Mitre link : CVE-2021-47443

CVE.ORG link : CVE-2021-47443

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime