CVE-2021-47043

Summary

In the Linux kernel, the following vulnerability has been resolved:

media: venus: core: Fix some resource leaks in the error path of 'venus_probe()'

If an error occurs after a successful 'of_icc_get()' call, it must be undone.

Use 'devm_of_icc_get()' instead of 'of_icc_get()' to avoid the leak. Update the remove function accordingly and axe the now unneeded 'icc_put()' calls.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux32f0a6ddc8c98a1aade2bf3d07c79d5d2c6ceb9a < 00b68a7478343afdf83f30c43e64db5296057030affected
LinuxLinux32f0a6ddc8c98a1aade2bf3d07c79d5d2c6ceb9a < 940d01eceb3a7866fbfca136a55a5625fc75a565affected
LinuxLinux32f0a6ddc8c98a1aade2bf3d07c79d5d2c6ceb9a < 711acdf0228dc71601247f28b56f13e850e395c8affected
LinuxLinux32f0a6ddc8c98a1aade2bf3d07c79d5d2c6ceb9a < 5a465c5391a856a0c1e9554964d660676c35d1b2affected
LinuxLinux5.5affected
LinuxLinux0 < 5.5unaffected
LinuxLinux5.10.37 <= 5.10.*unaffected
LinuxLinux5.11.21 <= 5.11.*unaffected
LinuxLinux5.12.4 <= 5.12.*unaffected
LinuxLinux5.13 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References