CVE-2021-47648

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47648
In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix a memory leak in 'host1x_remove()' Add a missing 'host1x_channel_list_free()' call in the remove function, as already done in the error handling path of the probe function.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/025c6643a81564f066d8381b9e2f4603e0f8438f Patch
https://git.kernel.org/stable/c/5124a344983e1b9670dae7add0e4d00d589aabcd Patch
https://git.kernel.org/stable/c/6bb107332db28a0e9256c2d36a0902b85307612c Patch
https://git.kernel.org/stable/c/c06577a80485511b894cb688e881ef0bc2d1d296 Patch
https://git.kernel.org/stable/c/fe1ce680560d4f0049ffa0c687de17567421c1ec Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Mar 2025, 19:10

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-401
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/025c6643a81564f066d8381b9e2f4603e0f8438f - () https://git.kernel.org/stable/c/025c6643a81564f066d8381b9e2f4603e0f8438f - Patch
References () https://git.kernel.org/stable/c/5124a344983e1b9670dae7add0e4d00d589aabcd - () https://git.kernel.org/stable/c/5124a344983e1b9670dae7add0e4d00d589aabcd - Patch
References () https://git.kernel.org/stable/c/6bb107332db28a0e9256c2d36a0902b85307612c - () https://git.kernel.org/stable/c/6bb107332db28a0e9256c2d36a0902b85307612c - Patch
References () https://git.kernel.org/stable/c/c06577a80485511b894cb688e881ef0bc2d1d296 - () https://git.kernel.org/stable/c/c06577a80485511b894cb688e881ef0bc2d1d296 - Patch
References () https://git.kernel.org/stable/c/fe1ce680560d4f0049ffa0c687de17567421c1ec - () https://git.kernel.org/stable/c/fe1ce680560d4f0049ffa0c687de17567421c1ec - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: gpu: host1x: Se corrige una pérdida de memoria en 'host1x_remove()'. Se agrega una llamada 'host1x_channel_list_free()' faltante en la función de eliminación, como ya se hizo en la ruta de manejo de errores de la función de sonda.

26 Feb 2025, 06:37

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 06:37

Updated : 2025-03-18 19:10

NVD link : CVE-2021-47648

Mitre link : CVE-2021-47648

CVE.ORG link : CVE-2021-47648

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime