CVE-2021-47654

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47654
In the Linux kernel, the following vulnerability has been resolved: samples/landlock: Fix path_list memory leak Clang static analysis reports this error sandboxer.c:134:8: warning: Potential leak of memory pointed to by 'path_list' ret = 0; ^ path_list is allocated in parse_path() but never freed.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/017196730299ccd6eed24bbfabed8af4ffd81530 Patch
https://git.kernel.org/stable/c/20fbf100f84b9aeb9c91421abe1927bc152bc32b Patch
https://git.kernel.org/stable/c/49b0d8bf05809df5f87e5c03e26d74bdfdab4571 Patch
https://git.kernel.org/stable/c/66b513b7c64a7290c1fbb88e657f7cece992e131 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Mar 2025, 18:49

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/017196730299ccd6eed24bbfabed8af4ffd81530 - () https://git.kernel.org/stable/c/017196730299ccd6eed24bbfabed8af4ffd81530 - Patch
References () https://git.kernel.org/stable/c/20fbf100f84b9aeb9c91421abe1927bc152bc32b - () https://git.kernel.org/stable/c/20fbf100f84b9aeb9c91421abe1927bc152bc32b - Patch
References () https://git.kernel.org/stable/c/49b0d8bf05809df5f87e5c03e26d74bdfdab4571 - () https://git.kernel.org/stable/c/49b0d8bf05809df5f87e5c03e26d74bdfdab4571 - Patch
References () https://git.kernel.org/stable/c/66b513b7c64a7290c1fbb88e657f7cece992e131 - () https://git.kernel.org/stable/c/66b513b7c64a7290c1fbb88e657f7cece992e131 - Patch
CWE CWE-401
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: samples/landlock: Se corrige la pérdida de memoria de path_list El análisis estático de Clang informa este error sandboxer.c:134:8: advertencia: Posible pérdida de memoria señalada por 'path_list' ret = 0; ^ path_list se asigna en parse_path() pero nunca se libera.

26 Feb 2025, 06:37

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 06:37

Updated : 2025-03-18 18:49

NVD link : CVE-2021-47654

Mitre link : CVE-2021-47654

CVE.ORG link : CVE-2021-47654

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime