CVE-2021-47529

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47529
In the Linux kernel, the following vulnerability has been resolved: iwlwifi: Fix memory leaks in error handling path Should an error occur (invalid TLV len or memory allocation failure), the memory already allocated in 'reduce_power_data' should be freed before returning, otherwise it is leaking.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/4768935c25403ba96e7a745645df24a51a774b7e Patch
https://git.kernel.org/stable/c/a571bc28326d9f3e13f5f2d9cda2883e0631b0ce Patch
https://git.kernel.org/stable/c/4768935c25403ba96e7a745645df24a51a774b7e Patch
https://git.kernel.org/stable/c/a571bc28326d9f3e13f5f2d9cda2883e0631b0ce Patch
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

21 Nov 2024, 06:36

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/4768935c25403ba96e7a745645df24a51a774b7e - Patch () https://git.kernel.org/stable/c/4768935c25403ba96e7a745645df24a51a774b7e - Patch
References () https://git.kernel.org/stable/c/a571bc28326d9f3e13f5f2d9cda2883e0631b0ce - Patch () https://git.kernel.org/stable/c/a571bc28326d9f3e13f5f2d9cda2883e0631b0ce - Patch

10 Jun 2024, 18:36

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
CWE CWE-401
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: iwlwifi: soluciona pérdidas de memoria en la ruta de manejo de errores. Si ocurre un error (lengua TLV no válida o falla en la asignación de memoria), la memoria ya asignada en 'reduce_power_data' debe liberarse antes de regresar; de lo contrario, está goteando.
References () https://git.kernel.org/stable/c/4768935c25403ba96e7a745645df24a51a774b7e - () https://git.kernel.org/stable/c/4768935c25403ba96e7a745645df24a51a774b7e - Patch
References () https://git.kernel.org/stable/c/a571bc28326d9f3e13f5f2d9cda2883e0631b0ce - () https://git.kernel.org/stable/c/a571bc28326d9f3e13f5f2d9cda2883e0631b0ce - Patch

24 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-24 15:15

Updated : 2024-11-21 06:36

NVD link : CVE-2021-47529

Mitre link : CVE-2021-47529

CVE.ORG link : CVE-2021-47529

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime